Responsibilities
- Manage ongoing identity security across corporate, production, customer, and US government identity domains.
- Lead the deployment of agent identity systems featuring short-lived credentials, lifecycle management tied to human users, and controlled workload integration.
- Design and implement authentication, federation, and authorization frameworks using standards like SAML and OIDC, along with policy-driven access models such as RBAC, ABAC, and policy-as-code for both human and non-human identities.
- Expand the use of non-human identity patterns across services, workloads, and agents, including short-lived credentials, mTLS, and identity-based networking.
- Advance just-in-time access adoption by collaborating with platform and engineering teams on governance and policy enforcement.
- Conduct regular identity threat modeling exercises, document findings, and oversee remediation efforts.
- Act as the primary security reviewer for identity-related architecture proposals and cross-team technical specifications.
- Investigate and promote the use of emerging identity security technologies and standards in coordination with security engineering teams.
- Collaborate with engineering groups to minimize risks in identity integrations at scale.
Benefits
- Medical, dental, and vision insurance available for employees and eligible dependents.
- Automatic coverage under basic life, accidental death and dismemberment (AD&D), and disability insurance.
- Commuter benefits provided.
- Unlimited paid time off with no accrual system.
- Two weeks of paid time off scheduled at year-end, subject to team and business requirements.
- Ten paid holidays annually.
- Supportive leave of absence options, including for military service and medical needs.
- Paid parental leave and subsidized backup childcare for all parents.
- Benefits for fertility and family building, including adoption, surrogacy, and preservation services.
- Financial stipend to support expenses related to new children.
- Eligibility to enroll in a 401k retirement savings plan.
Compensation
Total compensation may include base salary, restricted stock units, sign-on bonus, and potential future incentives, with actual pay based on qualifications, experience, skills, and other factors. The estimate does not include sign-on bonuses, benefits value, or long-term incentives.
Work Arrangement
On-site
Other
- Total compensation for this position may also include Restricted Stock units, sign-on bonus and other potential future incentives.
- Further note that total compensation for this position will be determined by each individual's relevant qualifications, work experience, skills, and other factors.
- This estimate excludes the value of any potential sign-on bonus; the value of any benefits offered; and the potential future value of any long-term incentives.
- Promoting health and well-being across all areas of Palantirians’ lives is just one of the ways we’re investing in our community.
- In keeping consistent with Palantir’s values and culture, we believe employees are “better together” and in-person work affords the opportunity for more creative outcomes.
- Therefore, we encourage employees to work from our offices to foster connectivity and innovation.
- Many teams do offer hybrid options (WFH a day or two a week), allowing our employees to strike the right trade-off for their personal productivity.
- Based on business need, there are a few roles that allow for “Remote” work on an exceptional basis.
- If you are applying for one of these roles, you must work from the state in which you are employed.
- If the posting is specified as Onsite, you are required to work from an office.
- Palantir values excellence regardless of background.
- We are proud to be an Equal Opportunity Employer for all, including but not limited to Veterans and those with disabilities.
- Palantir is committed to making the application and hiring process accessible to everyone and will provide a reasonable accommodation for those living with a disability.
- If you need an accommodation for the application or hiring process, please reach out and let us know how we can help.
- Please note that you will never be asked to submit a payment or share financial information to participate in our interview process.
- If you suspect that you've been contacted by a scammer, we recommend you cease all communication with the individual and consider reporting them to the relevant authorities, such as the US FBI Internet Crime Complaint Center (IC3).
- If you would like to understand more about how your personal data will be processed by Palantir, please see our