3 months ago
Base Salary
$95k - $142k/yr
Responsibilities
- Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes.
- Drive rollout of agent identity infrastructure, including short-lived credentials, human-principal-bound lifecycles, and controlled workload onboarding.
- Architect authentication, federation, and authorization systems across workforce and workload identity.
- Scale non-human identity patterns across service, workload, and agent populations using short-lived credentials, mTLS, and identity-based networking.
- Drive just-in-time access adoption and partner with platform and engineering teams on governance rollout and policy enforcement.
- Lead recurring identity threat modeling, publish findings, and track remediation.
- Serve as a primary security reviewer for identity architecture decisions and cross-team RFCs.
- Research and drive adoption of emerging identity security primitives and standards.
- Partner with engineering teams to reduce the attack surface of identity integrations at scale.
Requirements
- 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with demonstrated depth in identity-specific security.
- Hands-on production experience with at least one enterprise identity provider, such as Entra ID or Okta, including its governance and security surface.
- Deep technical proficiency in SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn, and their attack surfaces.
- Working proficiency in Go, Python, PowerShell, or TypeScript for prototyping tooling, analyzing identity-handling code, scaling automation, and participating in code review.
- Experience with cloud IAM, workload identity, service accounts, and identity-based access in distributed environments.
- Experience designing or evaluating non-human identity architectures for service, workload, and agent populations.
- Familiarity with privileged access management and secrets management at scale.
- Experience reducing standing access and shifting organizations toward just-in-time access postures in production.
- Experience with identity governance platforms and identity threat detection and response, including detection engineering against identity telemetry.
- Red team, offensive security, or incident response experience, particularly with an identity focus, is valued.
- Exposure to regulated environments such as FedRAMP, SOX, or IL-levels is valued.
- Current US security clearance or eligibility to obtain clearance.
- Contributions to the identity security community through talks, blog posts, public tools, or RFCs are valued.
- Strong communication skills for engineer-facing design reviews and leadership-facing risk discussions.
Benefits
- Medical, dental, vision, and voluntary life insurance options for employees and eligible dependents.
- Basic life, AD&D, and disability insurance.
- Commuter benefits.
- Take-what-you-need paid time off, plus two weeks of paid time off at the end of each year subject to team and business needs.
- Ten paid holidays.
- Supportive leave of absence program, including military service and medical-event leave.
- Paid new-parent leave and subsidized backup care for parents.
- Fertility and family-building benefits, including adoption, surrogacy, and preservation support.
- Stipend for expenses associated with a new child.
- 401(k) plan.
- Employees are encouraged to work from Palantir offices; many teams offer hybrid work one or two days per week, with remote work available only for select roles on an exceptional basis.
Tech Stack
Categories
About Palantir
AI-powered automation for every decision. At Palantir, our software powers AI-driven decisions in critical government and commercial enterprises in the West, from the factory floors to the front lines. Our platforms feature advanced tools for data protection, governance, responsible use of AI, and civilian protection capabilities for defense applications. Dominate your most complex problems with Palantir.