Responsibilities
- Manage the daily identity security posture for corporate, production, customer, and US Government identity planes.
- Lead the deployment of agent identity infrastructure, including short-lived credentials, lifecycle tied to a human principal, and controlled workload onboarding.
- Design authentication, federation, and authorization systems such as SAML, OIDC, and policy-driven access control models like RBAC, ABAC, and policy-as-code for both workforce and workload identity.
- Scale non-human identity patterns across service, workload, and agent populations, including short-lived credentials, mTLS, and identity-based networking.
- Promote just-in-time access patterns throughout the identity program, collaborating with platform and engineering teams on governance rollout and policy enforcement.
- Conduct regular identity threat modeling, publish findings, and track remediation efforts.
- Act as the primary security reviewer for identity architecture decisions and cross-team RFCs.
- Research and implement emerging identity security primitives and standards in partnership with Security Engineers across InfoSec.
- Work with engineering teams across the company to reduce the attack surface of identity integrations at scale.
Benefits
- Employees and their eligible dependents can enroll in medical, dental, and vision insurance, as well as voluntary life insurance.
- Employees are automatically covered by basic life, AD&D, and disability insurance.
- Commuter benefits are available.
- Take what you need paid time off, not based on accrual.
- Two weeks of paid time off are built into the end of each year, subject to team and business needs.
- Ten paid holidays are provided throughout the calendar year.
- Supportive leave of absence program includes time off for military service and medical events.
- Paid leave for new parents and subsidized back-up care for all parents.
- Fertility and family building benefits include adoption, surrogacy, and preservation.
- A stipend helps with expenses related to a new child.
- Employees can enroll in the 401k plan.
Compensation
Total compensation may also include Restricted Stock units, sign-on bonus, and other potential future incentives. Total compensation is determined by individual's relevant qualifications, work experience, skills, and other factors. This estimate excludes the value of any potential sign-on bonus, the value of any benefits offered, and the potential future value of any long-term incentives.
Work Arrangement
Hybrid
Other
- Total compensation may also include Restricted Stock units, sign-on bonus and other potential future incentives.
- Total compensation determined by individual's relevant qualifications, work experience, skills, and other factors.
- This estimate excludes the value of any potential sign-on bonus; the value of any benefits offered; and the potential future value of any long-term incentives.
- We encourage employees to work from our offices to foster connectivity and innovation.
- Many teams do offer hybrid options (WFH a day or two a week).
- Based on business need, there are a few roles that allow for 'Remote' work on an exceptional basis.
- If the posting is specified as Onsite, you are required to work from an office.
- Palantir values excellence regardless of background.
- We are proud to be an Equal Opportunity Employer for all, including but not limited to Veterans and those with disabilities.
- Palantir is committed to making the application and hiring process accessible to everyone and will provide a reasonable accommodation for those living with a disability.
- If you need an accommodation for the application or hiring process, please reach out and let us know how we can help.
- You will never be asked to submit a payment or share financial information to participate in our interview process.
- If you suspect that you've been contacted by a scammer, we recommend you cease all communication with the individual and consider reporting them to the relevant authorities, such as the US FBI Internet Crime Complaint Center (IC3).
