# Platform Engineer - Identity Infrastructure

**Company:** [Palantir](https://hotfix.jobs/companies/palantir)
**Location:** Palo Alto, CA, Washington, DC, New York, NY
**Role:** Security Engineering
**Experience:** 5+ years
**Skills:** Go, Python, TypeScript, AWS, Azure, GCP, EKS, ECS, Terraform, Helm, CloudFormation, SAML, OIDC, oauth 2.0, Kubernetes
**Posted:** 2026-08-04

> Build and operate secure identity infrastructure, governance, authorization, and token-issuance systems across corporate and customer-facing cloud environments. Requires 3+ years in SRE, DevOps, or software engineering, production service experience, cloud and container expertise, infrastructure-as-code proficiency, and security focus.

## Job Description

## Responsibilities
- Develop automation and tooling for corporate and customer-facing identity platforms.
- Build, secure, and manage geo-redundant containerized services using EKS and ECS in AWS and Azure.
- Scale Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks.
- Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud.
- Extend the identity platform to non-human identities, including workloads and AI agents, with scoped, short-lived credentials.
- Build an access graph and policy engine to make entitlements legible and authorization decisions enforceable and auditable.
- Design token-issuance and federation flows that make least-privilege, ephemeral access the default.
- Research and drive adoption of emerging authentication and session security standards, including device-bound session credentials and continuous access evaluation.
- Pressure-test designs and threat-model implementations with Identity Security Engineers.
- Partner with Security Compliance Engineers to reduce the cost and complexity of compliance enforcement.

## Requirements
- 3+ years of experience in Site Reliability Engineering, DevOps, software engineering, or an equivalent discipline, with a strong passion for security.
- Experience deploying and operating containerized services such as EKS or ECS in AWS, Azure, or Google Cloud.
- Experience building and operating production services or APIs, not only automation scripts.
- Expert-level proficiency in Go, Python, or TypeScript; Go is preferred.
- Experience with infrastructure-as-code such as Terraform, Helm, or CloudFormation.
- Active TS/SCI security clearance, or eligibility and willingness to obtain one.

## Nice to Haves
- Technical proficiency in SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, and WebAuthn.
- Experience managing identities and governance workflows with Entra ID, Keycloak, AWS Cognito, or Okta.
- Experience with policy engines, authorization-as-code, relationship-based access modeling, or entitlement graph design.
- Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation.
- Experience with workload and machine identity, service-to-service authentication, mTLS, and workload attestation.
- Interest in agentic identity, including agents as principals, delegation and on-behalf-of flows, and attribution across delegation chains.

## Similar roles

- [Product Security Engineer - QRA](https://hotfix.jobs/jobs/b17d7fd9-a657-4140-b506-13f20bae7281) - Zoox - Foster City, CA - $191k – $271k/yr
- [Security Operations Engineer](https://hotfix.jobs/jobs/85bd8ca0-ceb2-4577-bb0c-e5b2694452d0) - Front - San Francisco, CA - $180k – $260k/yr
- [Threat Intelligence Researcher (Cloud)](https://hotfix.jobs/jobs/43eb83d5-1e68-45c1-8f55-ba66f66b7288) - Wiz - Remote - $160k – $220k/yr
- [Product Security Engineer](https://hotfix.jobs/jobs/e38e1888-9bc3-4295-8e52-b36f2b011a18) - Cloudflare - Austin, TX
- [IT Manager](https://hotfix.jobs/jobs/9c31d15a-9357-4f04-b71e-d9cb83c69040) - Pave - San Francisco, CA - From $220k/yr

**Apply:** https://hotfix.jobs/jobs/01847c9b-a97d-493b-8845-4217c020f052
**Canonical:** https://hotfix.jobs/jobs/01847c9b-a97d-493b-8845-4217c020f052