Platform Engineer - Identity Infrastructure

The role

You will design, build and run secure identity infrastructure and tooling on Palantir's Identity Platform team. The work covers identity governance, access management and identities for workloads and AI agents.

What you will do

• Develop automation and tooling for corporate and customer-facing identity platforms
• Build, secure and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
• Scale Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code
• Build tooling to standardize operational workflows across AWS, Azure and Google Cloud Platform (GCP)
• Extend the identity platform to non-human identities such as workloads and AI agents, with scoped, short-lived credentials
• Build the governance layer: an access graph and a policy engine for auditable authorization
• Design token-issuance and federation flows that make least-privilege, ephemeral access the default
• Research and drive adoption of emerging authentication and session security standards
• Threat model implementations with Identity Security Engineers before they ship
• Partner with Security Compliance Engineers to build services that reduce compliance cost and complexity

Required qualifications

• 3+ years of experience in Site Reliability Engineering, DevOps, software engineering or an equivalent discipline, with a strong passion for security
• Experience deploying and operating containerized services (EKS, ECS or similar) in AWS, Azure or Google Cloud
• Experience building and operating production services or APIs, not only automation scripts
• Expert-level proficiency in a language such as Go (preferred), Python or TypeScript
• Experience with infrastructure-as-code (Terraform, Helm, CloudFormation or similar)
• An active TS/SCI security clearance, or eligibility and willingness to obtain one

Nice to have

• Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
• Experience managing identities and governance workflows on Entra ID, Keycloak, AWS Cognito or Okta
• Experience with policy engines, authorization-as-code, relationship-based access modeling or entitlement graph design
• Experience with token issuance and federation, including OAuth 2.0 token exchange and workload identity federation
• Non-human identity experience: workload and machine identity, plus interest in agentic identity

Benefits

• Medical, dental and vision insurance, plus voluntary life insurance
• Basic life, AD&D and disability insurance covered automatically
• Commuter benefits
• Relocation assistance
• Take what you need paid time off, not accrual based
• 2 weeks paid time off built into the end of each year (subject to team and business needs)
• 10 paid holidays per calendar year
• Leave of absence program, including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• You must hold an active TS/SCI security clearance, or be eligible and willing to obtain one
• Palantir will never ask you to submit a payment or share financial information during the interview process

About the company

Palantir builds software for data-driven decisions and operations. Its platforms help partners develop drugs, forecast supply chain disruptions and locate missing children.