Senior Identity Security Engineer

The role

You will own the security of identity systems for employees, customers and services. You will lead identity threat modeling, reduce standing access, and help design agent identity and just-in-time access.

What you will do

• Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
• Drive the rollout of agent identity infrastructure with short-lived credentials
• Architect authentication, federation, and authorization systems including SAML, OIDC, RBAC, ABAC and policy-as-code
• Scale non-human identity patterns across service, workload, and agent populations
• Drive adoption of just-in-time access patterns across the identity program
• Lead identity threat modeling on a regular cadence and track remediation
• Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
• Research and drive adoption of emerging identity security primitives and standards
• Partner with engineering teams to reduce the attack surface of identity integrations

Required qualifications

• 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with depth in identity-specific security
• Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent)
• Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
• Working proficiency in Go, Python, PowerShell, or TypeScript
• Strong communication skills for audiences from engineers to leadership
• Current US security clearance, or eligibility to obtain clearance

Nice to have

• Experience with cloud IAM and workload identity patterns
• Experience designing or evaluating non-human identity architectures
• Familiarity with privileged access management and secrets management at scale
• A track record of reducing standing access and shifting toward just-in-time access
• Experience with identity governance platforms
• Identity threat detection and response experience
• Red team, offensive security, or incident response background with an identity focus
• Exposure to regulated environments (FedRAMP, SOX, IL-levels)
• Contributions to the identity security community such as conference talks, blog posts, public tools or RFCs

Benefits

• Medical, dental and vision insurance for employees and eligible dependents
• Voluntary life insurance
• Basic life, AD&D and disability insurance covered automatically
• Commuter benefits
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year (subject to team and business needs)
• 10 paid holidays per year
• Leave of absence program including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• Current US security clearance, or eligibility to obtain clearance, is listed as a value
• Palantir will never ask you to submit payment or share financial information during interviews

About the company

Palantir builds software for data-driven decisions and operations used by partners to develop drugs, forecast supply chain disruptions and locate missing children. The company describes itself as a world-changing company.