Senior Identity Security Engineer

Owns the security posture of Palantir's identity infrastructure on the Identity Security team, which covers every identity type in the company, from workforce and customer accounts to workloads and AI agents, across corporate, production and US Government environments. The engineer architects authentication, federation and authorization (SAML, OIDC, RBAC, ABAC, policy as code), rolls out agent identity and just-in-time access to cut standing privilege, scales mTLS and short-lived credentials for non-human identities, runs regular identity threat modelling, and reviews identity designs across teams.

Palantir requires five or more years in information security or IAM with real identity depth, production experience with Entra ID or Okta, command of identity protocols and their attack surface, and coding in Go, Python, PowerShell or TypeScript. Clearance eligibility is valued. Hybrid in New York.