Senior Site Reliability Engineer (Site Reliability)

Planet; Berlin; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Comprehensive health plan

Wellness program

Flexible time off

Learning and tuition reimbursement

Parental leave

Offsites and happy hours

Volunteering benefits

Commuter benefits

Job summary

Planet is seeking a Senior Reliability Engineer with a focus on IAM to join the Corporate Engineering team in Berlin. You will help operate and evolve our enterprise identity ecosystem and serve as the technical authority for IAM.

You will architect identity providers (Okta, Auth0, Keycloak), automate HRIS-driven JML workflows, and implement IaC using Terraform/Ansible. Collaborate with Security to ensure GDPR compliance and Zero Trust.

Qualifications

• 6+ years of experience in infrastructure development and/or operations with a focus on Identity and Access Management.
• Experience deploying and maintaining databases and virtual machines.
• Experience with large web applications or enterprise identity architectures (Okta, Auth0, Keycloak).

Responsibilities

• Maintain operation and evolution of Planet's corporate infrastructure and IAM.
• Architect and maintain identity providers (Okta, Auth0, Keycloak).
• Automate Joiner/Mover/Leaver workflows from HRIS (e.g., HiBob).
• Develop automation with Python/Go for provisioning and data minimization.
• Implement IaC using Terraform, Ansible, or SaltStack.
• Participate in on-call rotation and drive incident response improvements.
• Collaborate with Security to ensure GDPR compliance and Zero Trust.

Skills

Python

Go

Automation

Incident response

RCA

Terraform

Ansible

OAuth/OIDC

Education

Bachelor's degree in a related field

Tools

Terraform

Ansible

Docker

Kubernetes

Git

CI/CD

Job description

• We are looking for a Senior Reliability Engineer with focus on Identity and Access Management (IAM) to join the Corporate Engineering team
• As an SRE together with other engineers you will be responsible for the continuous operation, further development and enhancement of Planet's corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem
• Help to ensure the operation of Planet's internal IT systems, specifically architecting and maintaining our identity providers (Okta, Auth0, Keycloak)
• Improve existing and create new solutions by engineering automated zero-day Joiner, Mover, and Leaver (JML) workflows directly from our HRIS (e.g., HiBob)
• Scripting & Tooling: Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization
• Identify and reduce operational toil through automation, making our systems self-healing and predictable
• Infrastructure as Code (IaC): Leverage APIs, Terraform, Ansible, or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across our identity platforms
• Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA), and post-mortem processes for complex authentication failures
• Collaborate closely with Security and other IT teams to embed reliability, scalability, and security best practices from the ground up, ensuring our identity architecture complies with GDPR and Zero Trust principles

Benefits

• Comprehensive health plan
• Wellness program and massages
• Flexible time off
• Recognition programs
• Commuter benefits
• Learning and tuition reimbursement
• Parental leave
• Offsites and happy hours
• Volunteering benefits

Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers)Expertise with a scripting language like PythonTrack record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak)Practical understanding of PKI, certificate lifecycles (S/MIME, X.509), and managing legacy directories like Active DirectorySolid understanding of Network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM)Bachelor's degree in a related field or equivalent professional experience6+ years experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access ManagementOperational experience in deploying and maintaining databasesExperience using Docker, ECS or Linux Containers in a production environmentAwareness of best practices about systems security and defensive programmingExperience in deploying and maintaining virtual machines e.g. KVM, ProxMoxExperience with version control e.g. GitExperience in software development using CI/CD processes and tools e.g. Jenkins, GitLabExperience with Access Control systems, e. g. Avigilon, Verkada or dormakabaExperience with Public Key Infrastructure (PKI) and deployment automation, renewal, and revocation of personal S/MIME certificates