Platform Engineer - Identity and Access Management (IAM)

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Platform Engineer on Palantir's Identity Security team, you will design, build, and operate secure-by-design identity infrastructure and tooling.

You will make it easier — and more secure — to implement identity governance and access management for Palantirians and customers worldwide. As part of Palantir's best-in-class Information Security organisation, you will research, implement, and scale innovative solutions that help Palantir stay ahead of a dynamic threat landscape. The Identity team is made up of engineers who are passionate about reducing risk and friction, and eliminating toil.

The team's primary focus is the development and management of identity platforms across both corporate and production (customer-facing) infrastructure. You will build purpose-built web services that help Palantirians stay compliant while minimising impact on their day-to-day productivity. Your work will directly strengthen the resilience of critical Palantir infrastructure that enables a globally distributed workforce.

Core Responsibilities Develop automation and tooling for corporate and customer-facing identity platforms Build, secure, and manage geo-redundant systems and services in AWS and Azure Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks Build tooling to standardise and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP) Research and drive adoption of emerging authentication protocols (such as passwordless auth) in collaboration with Security Engineers Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement What We Value Minimum 3 years' experience in Site Reliability Engineering (SRE), DevOps, or an equivalent discipline, with a strong passion for security Experience deploying and operating Linux- or Windows-based infrastructure in AWS, Azure, or Google Cloud Expert-level proficiency in a language such as Go (preferred), Python, PowerShell, or TypeScript Experience with infrastructure-as-code frameworks such as Terraform, CloudFormation, Ansible, Puppet, or PowerShell DSC What We Require Technical proficiency in identity protocols (SAML, OIDC, LDAP, Kerberos, FIDO2, WebAuthn) Experience managing identities and governance workflows on platforms such as Entra ID, AWS Cognito, or Okta Current UK security clearance (SC or DV level), or eligibility to obtain clearance