← All roles

Platform Engineer - Identity Infrastructure

Palantir· Information Security
Apply on company site
Hybrid (Palo Alto, CA)$135k - $200kFull-timePosted 2mo ago

About the role

Platform Engineer on Palantir's Identity Platform team, designing, building, and operating secure-by-design identity infrastructure and tooling to enable secure, scalable identity governance and access management for Palantirians and customers.

Responsibilities

  • Develop automation and tooling for corporate and customer-facing identity platforms
  • Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
  • Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks
  • Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP)
  • Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials
  • Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable
  • Design token-issuance and federation flows that make least-privilege, ephemeral access the default
  • Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers
  • Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship
  • Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement

Qualifications

  • Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
  • Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta
  • Experience with policy engines and authorization-as-code, and with relationship-based access modeling or entitlement graph design
  • Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation
  • Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows, and attribution across a delegation chain)
  • 3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering, or equivalent with a security focus
  • Experience deploying and operating containerized services (EKS, ECS, or similar) in AWS, Azure, or Google Cloud
  • Experience building and operating production services or APIs, not only automation scripts
  • Expert-level proficiency in Go (preferred), Python, or TypeScript
  • Experience with infrastructure-as-code (Terraform, Helm, CloudFormation, or similar)
  • Active TS/SCI security clearance, or eligibility and willingness to obtain one

Skills

Required:Identity protocolsIdentity governance platformsPolicy engines / authorization-as-codeToken issuance / federation
Nice to have:Non-human identity

Benefits

  • Medical, dental, and vision insurance for employees and eligible dependents
  • Basic life, AD&D and disability insurance for employees
  • Commuter benefits
  • Relocation assistance
  • Take what you need paid time off (not accrual based)
  • Two weeks paid time off at end of each year
  • 10 paid holidays per year
  • Leave of absence program including military and medical events
  • Paid parental leave and subsidized back-up care for all parents
  • Fertility and family-building benefits (adoption, surrogacy, preservation)
  • Child-related expense stipend
  • Enrollment in Palantir’s 401k plan
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Palantir

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Palantir