Senior Identity Security Engineer

The Role

As a Senior Identity Security Engineer on Palantir's Identity Security team, you will own the security posture of the identity infrastructure that Palantirians, customers, and services rely on every day. The Identity Security team is responsible for all identity types at Palantir - workforce, customer, workload, and agentic. You will help shape technical direction, reduce standing access, lead identity threat modeling, and contribute to next-generation identity primitives.

Core Responsibilities

• Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes.
• Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding.
• Architect authentication, federation, and authorization systems (including SAML, OIDC, RBAC, ABAC, and policy-as-code) across workforce and workload identity.
• Scale non-human identity patterns across service, workload, and agent populations (short-lived credentials, mTLS, identity-based networking).
• Drive adoption of just-in-time (JIT) access patterns across the identity program.
• Lead identity threat modeling on a regular cadence; publish findings and track remediation.
• Serve as a primary security reviewer on identity architecture decisions and cross-team RFCs.
• Research and drive adoption of emerging identity security primitives and standards.
• Partner with engineering teams to reduce the attack surface of identity integrations at scale.

What We Require

• 5+ years of experience in Information Security, Identity and Access Management, or an equivalent discipline, with demonstrated depth in identity-specific security.
• Hands-on production experience with at least one enterprise identity provider (Okta, Entra ID, or equivalent), including its governance and security surface.
• Deep technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, SCIM, FIDO2, WebAuthn) and their attack surface.
• Working proficiency in Go, Python, PowerShell, or TypeScript.
• Strong communication skills across engineering design reviews and leadership-facing risk calls.

What We Value

• Experience with cloud IAM and workload identity patterns in distributed environments.
• Experience designing or evaluating non-human identity (NHI) architectures.
• Familiarity with privileged access management and secrets management patterns at scale.
• Experience reducing standing access and moving toward just-in-time access postures.
• Experience with identity governance platforms and threat detection/response engineering.
• Red team, offensive security, or incident response background.
• Exposure to regulated environments (FedRAMP, SOX, IL-levels).
• Contributions to the identity security community (conference talks, blog posts, RFCs).
• Current US security clearance, or eligibility to obtain clearance.