Platform Engineer - Identity Infrastructure

The role

You will build and run identity infrastructure: automation, SSO integrations, and governance and token-issuance flows that enforce least-privilege access. You will work with identity, security and compliance engineers on cloud platforms across AWS, Azure and Google Cloud.

What you will do

• Develop automation and tooling for corporate and customer-facing identity platforms
• Build, secure and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
• Scale Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code
• Build tooling to standardize operational workflows across AWS, Azure and Google Cloud Platform (GCP)
• Extend the identity platform to non-human identities such as workloads and AI agents
• Build the governance layer: an access graph and a policy engine for auditable authorization
• Design token-issuance and federation flows that make least-privilege, ephemeral access the default
• Research and drive adoption of emerging authentication and session security standards
• Threat model implementations with Identity Security Engineers before they ship
• Partner with Security Compliance Engineers to reduce the cost and complexity of compliance enforcement

Required qualifications

• 3+ years of experience in Site Reliability Engineering, DevOps, software engineering or an equivalent discipline, with a strong passion for security
• Experience deploying and operating containerized services (EKS, ECS or similar) in AWS, Azure or Google Cloud
• Experience building and operating production services or APIs, not only automation scripts
• Expert-level proficiency in a language such as Go, Python or TypeScript
• Experience with infrastructure-as-code (Terraform, Helm, CloudFormation or similar)
• An active TS/SCI security clearance, or eligibility and willingness to obtain one

Nice to have

• Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
• Experience managing identities and governance workflows on Entra ID, Keycloak, AWS Cognito or Okta
• Experience with policy engines, authorization-as-code, or relationship-based access modeling
• Experience with token issuance and federation, including OAuth 2.0 token exchange and workload identity federation
• Non-human identity experience: workload and machine identity, plus interest in agentic identity

Benefits

• Medical, dental and vision insurance for employees and eligible dependents
• Voluntary life insurance
• Basic life, AD&D and disability insurance, automatically covered
• Commuter benefits
• Relocation assistance
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year, subject to team and business needs
• 10 paid holidays per calendar year
• Leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child

Before you apply

• Requires an active TS/SCI security clearance, or eligibility and willingness to obtain one
• Remote work is allowed only for a few roles on an exceptional basis, and then only from the state where you are employed
• Palantir states you will never be asked to submit a payment or share financial information during interviews

About the company

Palantir builds software for data-driven decisions and operations. Its platforms help partners develop drugs, forecast supply chain disruptions and locate missing children.