Platform Engineer - Identity Infrastructure

Core Responsibilities

• Develop automation and tooling for corporate and customer-facing identity platforms
• Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure
• Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks
• Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP)
• Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials
• Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable
• Design token-issuance and federation flows that make least-privilege, ephemeral access the default
• Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers
• Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship
• Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement

What We Value

• Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)
• Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta
• Experience with policy engines and authorization-as-code, and with relationship-based access modeling or entitlement graph design
• Experience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation
• Non-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows, and attribution across a delegation chain)

What We Require

• 3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering, or an equivalent discipline, with a strong passion for security
• Experience deploying and operating containerized services (EKS, ECS, or similar) in AWS, Azure, or Google Cloud
• Experience building and operating production services or APIs, not only automation scripts
• Expert-level proficiency in a language such as Go (preferred), Python, or TypeScript
• Experience with infrastructure-as-code (Terraform, Helm, CloudFormation, or similar)
• An active TS/SCI security clearance, or eligibility and willingness to obtain one