Software Engineer - Identity and Access Management in London

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.

The Role As a Software Engineer on Palantir's Identity team, you will design, develop, and maintain core authentication and authorisation services. Your work will enhance the security and usability of identity governance workflows and access management for Palantirians and our customers globally. Your approach will emphasize secure-by-design principles, embedding security considerations into every phase of the software development lifecycle. By adopting shift-left security practices, you will proactively address security concerns early in the development process, ensuring that our systems are resilient against emerging threats.

The Identity team consists of Engineers who are passionate about reducing risk, friction and eliminating toil. The team's primary focus is the development of identity platforms for both corporate and production (customer-facing) infrastructure. As part of the team, you will build novel web services that help Palantirians stay compliant while minimising impact on their productivity flows. Your work will directly impact and improve the resilience of Palantir's critical infrastructure, empowering a globally distributed workforce while maintaining compliance with minimal impact on productivity flows.

Core Responsibilities

• Develop scalable services for workforce, customer and workload authentication and authorisation
• Build services that help with mitigating identity related security risks, enforcing compliance requirements and enhance the security posture of Palantir
• Engineer automation frameworks that scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants
• Build tooling to standardise and scale operational workflows in AWS, Azure and Google Cloud Platform (GCP)
• Design and build REST APIs that enable zero-touch, end-to-end automation of Identity and Access Management resources
• Research and drive the implementation of secure authentication protocols (like passwordless auth) by collaborating with Security Engineers

What We Value

• Ability to work backwards from user needs, demonstrating empathy to create intuitive and secure solutions that empower users
• Expertise in developing secure, scalable distributed services and REST APIs
• Experience with infrastructure-as-code frameworks such as Terraform, CloudFormation, Ansible, Puppet, or PowerShell DSC
• Familiarity with access control models (RBAC, ABAC, etc.) and user lifecycle management workflows

What We Require

• Engineering background in Computer Science, Mathematics, Software Engineering, Physics or similar field
• Familiarity with data structures, storage systems, cloud infrastructure, and other technical tools
• Strong coding skills with demonstrated proficiency in at least one of the following languages - Golang, C++, Python, Rust, or Java
• Technical proficiency in identity protocols (SAML, OIDC, LDAP, Kerberos, FIDO2, WebAuthN)

Life at Palantir We want every Palantirian to achieve their best outcomes, that’s why we celebrate individuals’ strengths, skills, and interests, from your first interview to your longterm growth, rather than rely on traditional career ladders. Paying attention to the needs of our community enables us to optimize our opportunities to grow and helps ensure many pathways to success at Palantir. Promoting health and well-being across all areas of Palantirians’ lives is just one of the ways we’re investing in our community. Learn more at Life at Palantir and note that our offerings may vary by region.

In keeping consistent with Palantir’s values and culture, we believe employees are “better together” and in-person work affords the opportunity for more creative outcomes. Therefore, we encourage employees to work from our offices to foster connectivity and innovation. Many teams do offer hybrid options (WFH a day or two a week), allowing our employees to strike the right trade-off for their personal productivity. Based on business need, there are a few roles that allow for “Remote” work on an exceptional basis. If you are applying for one of these roles, you must work from the city and or country in which you are employed. If the posting is specified as Onsite, you are required to work from an office.

Palantir is committed to promoting a culture of diversity, equity, and inclusion. We believe that all Palantirians share the responsibility of upholding our commitment to these values and encourage candidates from a wide range of backgrounds, perspectives, and lived experiences to join us in solving the world’s hardest problems.

Palantir is committed to making the job application process accessible to everyone. If you are living with a disability (visible or not visible) and need to request a reasonable accommodation for any part of the application or hiring process, please reach out and let us know how we can help.