Senior Identity Security Engineer

Secures the identity systems that Palantir staff, customers and services depend on, as a Senior Identity Security Engineer in Washington, DC. The Identity Security team is responsible for workforce, customer, workload and agentic identity alike, and this engineer helps set its technical direction: designing authentication, federation and policy-driven access control, driving agent identity and just-in-time access to reduce standing permissions, extending non-human identity patterns, leading identity threat models and tracking their fixes, and serving as a primary reviewer on identity architecture.

The team requires at least five years in information security or identity and access management, hands-on production work with an enterprise identity provider such as Entra ID or Okta, deep knowledge of SAML, OIDC, OAuth 2.0 and FIDO2 and how they are attacked, and scripting or coding skills. Hybrid.