Platform Engineer - Identity Infrastructure

The role

You will design, build and run secure identity infrastructure and tooling on Palantir's Identity Platform team. The work covers identity governance, access management and identities for workloads and AI agents.

What you will do

• Develop automation and tooling for corporate and customer-facing identity platforms
• Build, secure and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
• Scale Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code
• Build tooling to standardize operational workflows across AWS, Azure and Google Cloud Platform (GCP)
• Extend the identity platform to non-human identities, including workloads and AI agents, with scoped, short-lived credentials
• Build the governance layer: an access graph and a policy engine for enforceable, auditable authorization
• Design token-issuance and federation flows that make least-privilege, ephemeral access the default
• Research and drive adoption of emerging authentication and session security standards with Security Engineers
• Threat model implementations with Identity Security Engineers before they ship
• Partner with Security Compliance Engineers to build services that reduce compliance cost and complexity

Required qualifications

• 3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering or an equivalent discipline, with a strong passion for security
• Experience deploying and operating containerized services (EKS, ECS or similar) in AWS, Azure or Google Cloud
• Experience building and operating production services or APIs, not only automation scripts
• Expert-level proficiency in a language such as Go, Python or TypeScript
• Experience with infrastructure-as-code (Terraform, Helm, CloudFormation or similar)
• An active TS/SCI security clearance, or eligibility and willingness to obtain one

Nice to have

• Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
• Experience managing identities and governance workflows on Entra ID, Keycloak, AWS Cognito or Okta
• Experience with policy engines, authorization-as-code, relationship-based access modeling or entitlement graph design
• Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials and workload identity federation
• Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity

Benefits

• Medical, dental and vision insurance, plus voluntary life insurance, for employees and eligible dependents
• Basic life, AD&D and disability insurance, automatically covered
• Commuter benefits
• Relocation assistance
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year (subject to team and business needs)
• 10 paid holidays each calendar year
• Leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• An active TS/SCI security clearance is required, or you must be eligible and willing to obtain one

About the company

Palantir builds software for data-driven decisions and operations, used by partners to develop drugs, forecast supply chain disruptions and locate missing children. The company is an Equal Opportunity Employer.