Senior Identity Security Engineer

The role

You will own the security of identity systems used by Palantir employees, customers, and services. You will shape identity security direction, reduce standing access, and lead identity threat modeling.

What you will do

• Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes
• Drive the rollout of agent identity infrastructure, including short-lived credentials and controlled workload onboarding
• Architect authentication, federation, and authorization systems (SAML, OIDC, RBAC, ABAC, policy-as-code)
• Scale non-human identity patterns across service, workload, and agent populations
• Drive adoption of just-in-time access patterns with platform and engineering teams
• Lead identity threat modeling on a regular cadence, publish findings and track remediation
• Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs
• Research and drive adoption of emerging identity security primitives and standards
• Partner with engineering teams to reduce the attack surface of identity integrations at scale

Required qualifications

• 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with depth in identity-specific security
• Hands-on production experience with at least one enterprise identity provider (Entra ID, Okta, or equivalent)
• Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface
• Working proficiency in Go, Python, PowerShell, or TypeScript
• Strong communication skills for audiences from engineers to leadership
• Current US security clearance, or eligibility to obtain clearance

Nice to have

• Experience with cloud IAM and workload identity patterns
• Experience designing or evaluating non-human identity (NHI) architectures
• Familiarity with privileged access management and secrets management at scale
• A track record of reducing standing access and shifting toward just-in-time access
• Experience with identity governance platforms
• Identity threat detection and response experience
• Red team, offensive security, or incident response background
• Exposure to regulated environments (FedRAMP, SOX, IL-levels)
• Contributions to the identity security community (conference talks, blog posts, public tools, RFCs)

Benefits

• Medical, dental, and vision insurance for employees and eligible dependents
• Voluntary life insurance
• Basic life, AD&D and disability insurance, automatically covered
• Commuter benefits
• Take what you need paid time off, not accrual based
• 2 weeks paid time off at the end of each year (subject to team and business needs)
• 10 paid holidays per year
• Leave of absence program including military service and medical events
• Paid leave for new parents and subsidized back-up care for all parents
• Fertility and family building benefits, including adoption, surrogacy and preservation
• Stipend for expenses that come with a new child
• 401k plan

Before you apply

• A current US security clearance is required, or you must be eligible to obtain one
• You will never be asked to pay or share financial information during interviews

About the company

Palantir builds software for data-driven decisions and operations. Its platforms help partners develop drugs, forecast supply chain disruptions, and locate missing children.