{"id":125934,"url":"https://alion.io/job/palantir-technologies-platform-engineer-identity-infrastructure-2","title":"Platform Engineer - Identity Infrastructure","company":{"id":24,"name":"Palantir Technologies","domain":"palantir.com","url":"https://alion.io/company/palantir","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":62,"open_postings":233,"ghost_share":0.554,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":119,"computed_at":"2026-10-22T06:10:10Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":117000,"max_usd":233000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":664},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Keycloak","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-08-04T21:07:54Z","employer_posted_date":"2026-08-04","last_verified_at":"2026-10-22T10:28:07Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":78},"description":"The Role\nAs a Platform Engineer on Palantir's Identity Platform team, you will design, build, and operate secure-by-design identity infrastructure and tooling. You will make identity governance and access management easier and more secure to implement for Palantirians and customers worldwide. As part of Palantir's best-in-class Information Security organization, you will research, implement, and scale innovative solutions that help Palantir stay ahead of a dynamic threat landscape.\nYou will help the team build the next-generation identity platform that treats agents and workload identities as first-class principals: the access graph that makes entitlements legible, the policy engine that makes authorization enforceable and auditable, and the token-issuance layer that keeps access short-lived, scoped, and least-privilege by default. Your work will shape the arc of these components from design to production.\nYou will join the high-performing Identity Platform team, engineers who are passionate about delivering identity outcomes at scale that reduce risk and friction. The team builds and operates the identity platforms that serve both corporate and production (customer-facing) infrastructure, and the paved-road tooling and secure baselines that teams across Palantir deploy on. Your goal will be to make the secure path the easy path. Your work will directly strengthen the identity substrate beneath Palantir's most critical deployments, from a globally distributed workforce to regulated and air-gapped environments.\nCore Responsibilities\nDevelop automation and tooling for corporate and customer-facing identity platforms\nBuild, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure\nScale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks\nBuild tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP)\nExtend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials\nBuild the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable\nDesign token-issuance and federation flows that make least-privilege, ephemeral access the default\nResearch and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers\nPressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship\nPartner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement\nWhat We Value\nTechnical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn)\nExperience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta\nExperience with policy engines and authorization-as-code, and with relationship-based access modeling or entitlement graph design\nExperience with token issuance and federation, including OAuth 2.0 token exchange, short-lived credentials, and workload identity federation\nNon-human identity experience: workload and machine identity (service-to-service authentication, mTLS, workload attestation), plus interest in agentic identity (agents as principals, delegation and on-behalf-of flows, and attribution across a delegation chain)\nWhat We Require\n3+ years of experience in Site Reliability Engineering (SRE), DevOps, software engineering, or an equivalent discipline, with a strong passion for security\nExperience deploying and operating containerized services (EKS, ECS, or similar) in AWS, Azure, or Google Cloud\nExperience building and operating production services or APIs, not only automation scripts\nExpert-level proficiency in a language such as Go (preferred), Python, or TypeScript\nExperience with infrastructure-as-code (Terraform, Helm, CloudFormation, or similar)\nAn active TS/SCI security clearance, or eligibility and willingness to obtain one","description_format":"text","description_chars":4222,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Integration & ETL Tools","Decision Intelligence","Defense AI"],"lifecycle":[{"event":"open","at":"2026-08-04T21:07:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 207 · green card filings: 38","filings_12m":207,"filings_prev_12m":125,"green_card_filings_12m":38,"median_offered_wage_usd":150949,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":74}],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.568,"p_room":0.72,"age_days":78,"expected_fill_days":119,"reasons":["conf:2","stale_co","velocity","win:mid","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/palantir-technologies-platform-engineer-identity-infrastructure-2","json_url":"https://alion.io/job/palantir-technologies-platform-engineer-identity-infrastructure-2.json","meta":{"generated_at":"2026-10-22T11:50:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9940,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":24},"rest":"https://alion.io/mcp/rest/get_company?id=24"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpalantir-technologies-platform-engineer-identity-infrastructure-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpalantir-technologies-platform-engineer-identity-infrastructure-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpalantir-technologies-platform-engineer-identity-infrastructure-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/palantir-technologies-platform-engineer-identity-infrastructure-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpalantir-technologies-platform-engineer-identity-infrastructure-2"}]}