Senior Identity Security Engineer

The role

You will own the security of identity systems used by Palantir staff, customers, and services. You will lead identity threat modeling, reduce standing access, and help shape identity security direction across the company.

What you will do

• Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
• Drive the rollout of agent identity infrastructure, including short-lived credentials and controlled workload onboarding
• Architect authentication, federation, and authorization systems, including SAML, OIDC, and policy-driven access control
• Scale non-human identity patterns across service, workload, and agent populations
• Drive adoption of just-in-time access patterns with platform and engineering teams
• Lead identity threat modeling on a regular cadence, publish findings and track remediation
• Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
• Research and drive adoption of emerging identity security primitives and standards
• Partner with engineering teams to reduce the attack surface of identity integrations at scale

Required qualifications

• 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with depth in identity-specific security
• Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent)
• Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
• Working proficiency in Go, Python, PowerShell, or TypeScript
• Strong communication skills for audiences from engineers to leadership

Nice to have

• Experience with cloud IAM and workload identity patterns
• Experience designing or evaluating non-human identity architectures
• Familiarity with privileged access management and secrets management at scale
• A track record of reducing standing access and shifting toward just-in-time access
• Experience with identity governance platforms
• Identity threat detection and response experience, including detection engineering
• Red team, offensive security, or incident response background, especially with an identity focus
• Exposure to regulated environments (FedRAMP, SOX, IL-levels)
• Contributions to the identity security community (conference talks, blog posts, public tools, RFCs)
• Current US security clearance, or eligibility to obtain clearance

Benefits

• Medical, dental, and vision insurance, plus voluntary life insurance
• Basic life, AD&D and disability insurance, automatically covered
• Commuter benefits
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year (subject to team and business needs)
• 10 paid holidays per year
• Leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy, and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• Current US security clearance, or eligibility to obtain clearance
• Palantir will provide reasonable accommodation for applicants with disabilities

About the company

Palantir builds software for data-driven decisions and operations, used by partners to develop drugs, forecast supply chain disruptions, and locate missing children. The company describes itself as an Equal Opportunity Employer.