Senior Identity Platform Engineer

Welcome to Planet

We believe in using space to help life on Earth.

Planet designs, builds and operates the largest constellation of imaging satellites in history. This constellation delivers an unprecedented dataset of empirical information via a revolutionary cloud-based platform to authoritative figures in commercial, environmental and humanitarian sectors. We are both a space company and a data company all rolled into one.

Customers and users across the globe use Planet’s data to develop new technologies, drive revenue, power research and solve our world’s toughest obstacles.

As we control every component of hardware design, manufacturing, data processing and software engineering, our office is a truly inspiring mix of experts from a variety of domains.

We have a people-centric approach to culture and community, and we strive to evolve in a way that puts our team members first and prepares our company for growth. Join Planet and be part of our mission to change the way people see the world.

Planet is a global company with employees working remotely worldwide and joining us from offices in San Francisco, Washington DC, Germany, Austria, Slovenia and the Netherlands.

About the Role

We are looking for a Senior Identity Platform Engineer with a focus on Identity and Access Management (IAM) to join our Corporate Engineering team.

As an SRE, working alongside other engineers, you will be responsible for the continuous operation, further development and enhancement of Planet’s corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem.

This is a full-time, hybrid role requiring you to work from our Berlin, Haarlem or Ljubljana office three days per week.

Impact You’ll Own

  • Identity Platform Management: Help ensure the smooth operation of Planet’s internal IT systems, specifically architecting and maintaining our identity providers (Okta, Auth0 and Keycloak).
  • Automated Identity Lifecycle Management: Improve existing and create new solutions by engineering automated, zero-day Joiner, Mover and Leaver (JML) workflows directly from our HRIS (e.g. HiBob).
  • Scripting & Tooling: Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications and enforce identity data minimisation.
  • Automation & Operational Excellence: Identify and reduce operational toil through automation, making our systems self-healing and predictable.
  • Infrastructure as Code (IaC): Leverage APIs, Terraform, Ansible or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across our identity platforms.
  • Incident Management & On-Call: Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA) and post-mortem processes for complex authentication failures.
  • Security & Compliance: Collaborate closely with Security and other IT teams to embed reliability, scalability and security best practices from the ground up, ensuring our identity architecture complies with GDPR and Zero Trust principles.

What You Bring

  • 6+ years of experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access Management.
  • Bachelor’s degree in a related field or equivalent professional experience.
  • Expertise in a scripting language such as Python.
  • Track record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0 and Keycloak).
  • Experience integrating HR Information Systems with identity directories and handling complex edge cases, such as re-hires and cross-border transfers.
  • Solid understanding of network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML and SCIM).
  • Practical understanding of PKI, certificate lifecycles (S/MIME and X.509) and managing legacy directories such as Active Directory.

What Makes You Stand Out

  • Operational experience in deploying and maintaining databases.
  • Experience using Docker, ECS or Linux Containers in a production environment.
  • Awareness of best practices in systems security and defensive programming.
  • Experience with version control systems such as Git.
  • Experience in deploying and maintaining virtual machines, e.g. KVM or Proxmox.
  • Experience in software development using CI/CD processes and tools such as Jenkins or GitLab.
  • Experience with access control systems, e.g. Avigilon, Verkada or dormakaba.
  • Experience with Public Key Infrastructure (PKI), including deployment automation, renewal and revocation of personal S/MIME certificates.

Application Deadline

Applications must be submitted by 11:45 p.m. / 23:45 CET on the date stated below.

Applications are reviewed on a rolling basis. This posting may be removed earlier than projected if a suitable pool of applications has been received. For this reason, we recommend applying as soon as you are able to.

Export Control Requirements

Planet Labs Germany GmbH is authorised to receive U.S. export-controlled information at Planet under an export licence issued by the Bureau of Industry and Security.

This position requires access to export-controlled information. As such, employment (or the hiring of a contractor) is contingent upon the candidate’s ability to access all applicable export-controlled information without additional export licensing being required by the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls.

Benefits While Working at Planet

These offerings are dependent on employment type and geographical location, based upon applicable law or company policy.

  • Paid Time Off: Including vacation, holidays and company-wide days off.
  • Employee Wellness Programme: Access to initiatives that support your wellbeing.
  • Home Office Reimbursement: Financial support for your home-working setup.
  • Monthly Phone & Internet Reimbursement: Support towards your monthly connectivity costs.
  • Learning & Development: Tuition reimbursement and access to LinkedIn Learning.
  • Equity: The opportunity to participate in Planet’s equity programme.
  • Volunteering Paid Time Off: Dedicated paid time to support causes that matter to you.

Compensation

The expected starting gross salary range for this role is listed below. Individual placement within this range is determined objectively based on gender-neutral criteria such as your skills, qualifications and professional experience.

This position may also be eligible for discretionary bonuses and/or equity.

Germany Salary Range:

€77,000 – €96,300 EUR

San Francisco Fair Chance Ordinance

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Why We Care So Much About Belonging

We’re dedicated to helping the whole Planet, and to do that, we must strive to represent all of it within each of our offices and on all of our teams. That’s why Planet is guided by an ultimate north star of Belonging, dreaming big as we approach our ongoing work.

If this job intrigues you, but you’re thinking you might not have all the qualifications, please do apply!

At Planet, we are looking for well-rounded people from around the world who can contribute in more ways than just those listed in this job description. We don’t just fill positions; we aspire to fulfil people’s careers, and we’re most excited about people who are motivated by our underlying humanitarian efforts.

We’re a few orbits around the sun before we get to where we want to be, so we hope you’re excited to come along for the ride.

Equal Employment Opportunity (EEO) Statement

Planet is committed to building a community where everyone belongs, and we invite people from all backgrounds to apply.

Planet is an equal opportunity employer and is committed to providing employment opportunities regardless of race, religious creed, colour, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state and local laws.

Know Your Rights.

Accommodations

Planet is an inclusive community, and we know that everyone has their own needs. If you have a disability or special need that requires accommodation during the hiring process, please reach out to [email protected] or contact your recruiter with your request.

Your message will be confidential, and we will be happy to assist you.

Privacy Policy

California Applicants: By clicking “Apply Now” at the top of this job posting, I acknowledge that I have read the Planet Data Privacy Notice for California Staff Members and Applicants, and hereby consent to the collection, processing, use and storage of my personal information as described therein.

European Applicants: By clicking “Apply Now” at the top of this job posting, I acknowledge that I have read the Candidate Privacy Notice GDPR Planet Labs Europe, and hereby consent to the collection, processing, use and storage of my personal information as described therein.

AI in Our Interviewing Process

Planet is committed to providing an exceptional interview experience for all candidates. We currently use Metaview to better focus on candidates and less on trying to capture notes.

With the candidate’s consent, select interviews may be recorded and include a “Planet AI Notetaker” for transcription and summarisation purposes.

Should an interview involve the use of AI interview technologies, the candidate will receive notification and have the ability to opt out both in advance and/or in real time. Opting out will not affect your candidacy.

Candidate AI Policy

Planet embraces Artificial Intelligence (AI) tools, and we encourage their responsible use. We understand that candidates may use various resources, including AI tools, to prepare for interviews and assessments.

However, during any live interview stage or when actively completing assessments for this position, the use of AI tools (e.g. Large Language Models (LLMs), deepfake technology, etc.) is strictly prohibited unless explicitly prompted by an interviewer or assessment instructions.

If you are unsure about acceptable use, please contact your recruiter for clarification.

If an AI tool or similar technology is desired as an accommodation, please contact [email protected] with your request for assistance. Your message will be confidential, and we will be happy to assist you.

Violation of this policy may result in disqualification of your application.

Don't miss out on new jobs!

Signup for weekly updates on new jobs
so you can be the first to apply

Subscribe to our Weekly Job Board Updates!

Signup for weekly updates on new jobs
so you can be the first to apply

Contact form for Companies

Are you a talented professional seeking a new opportunity?
Visit our Talents Page.

Are you hiring?