Platform Engineer - Identity Infrastructure

A World-Changing Company

Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

Core Responsibilities

Develop automation and tooling for corporate and customer-facing identity platforms

Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure

Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks

Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP)

Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials

Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable

Design token-issuance and federation flows that make least-privilege, ephemeral access the default

Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers

Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship

Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement

What We Value

Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)

Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta

Experience with policy engines and authorization-as-code, and with relationship-based access modeling or entitlement graph design

Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation

Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows, and attribution across a delegation chain)

What We Require

3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering, or an equivalent discipline, with a strong passion for security

Experience deploying and operating containerized services (EKS, ECS, or similar) in AWS, Azure, or Google Cloud

Experience building and operating production services or APIs, not only automation scripts

Expert-level proficiency in a language such as Go (preferred), Python, or TypeScript

Experience with infrastructure-as-code (Terraform, Helm, CloudFormation, or similar)

An active TS/SCI security clearance, or eligibility and willingness to obtain one

Our benefits aim to promote health and wellbeing across all areas of Palantirians’ lives. We work to continuously improve our offerings and listen to our community as we design and update them. The list below details our available benefits and some of the perks that can be enjoyed as an employee of Palantir Technologies.

Benefits

•  Employees (and their eligible dependents) can enroll in medical, dental, and vision insurance as well as voluntary life insurance •  Employees are automatically covered by Palantir’s basic life, AD&D and disability insurance •  Commuter benefits •  Relocation assistance •  Take what you need paid time off, not accrual based •  2 weeks paid time off built into the end of each year (subject to team and business needs) •  10 paid holidays throughout the calendar year •  Supportive leave of absence program including time off for military service and medical events •  Paid leave for new parents and subsidized back-up care for all parents •  Fer …