← All roles

Platform Engineer - Identity Infrastructure

Palantir· Information Security
Apply on company site
Hybrid (New York, NY)$135k - $200kFull-timePosted 2mo ago

About the role

Platform Engineer on Palantir's Identity Platform team to design, build, and operate secure-by-design identity infrastructure and tooling, enabling identity governance, access management, and scalable security controls across corporate and customer-facing environments.

Responsibilities

  • Develop automation and tooling for corporate and customer-facing identity platforms
  • Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
  • Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks
  • Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP)
  • Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials
  • Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable
  • Design token-issuance and federation flows that make least-privilege, ephemeral access the default
  • Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers
  • Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship
  • Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement

Qualifications

  • Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
  • Experience managing identities and governance workflows on Entra ID, Keycloak, AWS Cognito, or Okta
  • Experience with policy engines and authorization-as-code, and entitlement graph design
  • Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation
  • Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation) plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows)

Skills

Required:Identity protocolsIdentity platforms toolingPolicy engines / authorization-as-codeToken issuance & federation
Nice to have:Non-human identity

Benefits

  • Medical, dental, and vision insurance for employees and eligible dependents
  • Basic life, AD&D, and disability insurance for employees
  • Commuter benefits
  • Relocation assistance
  • Take what you need paid time off (non-accrual)
  • 2 weeks paid time off built into year-end period
  • 10 paid holidays per year
  • Leave programs including military, medical, parental leave and family-building benefits
  • Fertility and family-building benefits including adoption, surrogacy, and preservation
  • Child-related expense stipend
  • Enrollment in Palantir 401k plan
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Palantir

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Palantir