Senior Identity Platform Engineer

Planet Labs; Haarlem; Hybrid; EUR 75,000 - 94,000; Full time

Benefits offered by this job

Paid time off

Wellness Program

Home Office Reimbursement

Monthly Phone and Internet Reimb.

Tuition Reimbursement and LinkedIn学习

Equity

Volunteering Paid Time Off

Job summary

Planet Labs is seeking a Senior Identity Platform Engineer to own and operate the corporate IAM ecosystem. You will help design, implement, and automate identity workflows across providers (Okta, Auth0, Keycloak) while collaborating with Security and IT teams.

You’ll work in a hybrid model, joining offices in Haarlem, Berlin or Ljubljana three days per week and contributing to a resilient, scalable, and secure identity infrastructure that respects GDPR and Zero Trust principles.

Qualifications

• 6+ years of infrastructure development/operations with a focus on IAM.
• Bachelor’s degree or equivalent professional experience.
• Expertise with a scripting language like Python.
• Experience managing large web apps and complex identity architectures (Okta/Auth0/Keycloak).
• Experience integrating HRIS with identity directories and handling edge cases (re-hires, cross-border transfers).
• Solid understanding of network principles and modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM).
• Knowledge of PKI, certificates, and Active Directory.

Responsibilities

• Operate and evolve Planet’s corporate IAM platforms and identity providers (Okta, Auth0, Keycloak).
• Automate onboarding/offboarding (JML) workflows from HRIS integrations.
• Develop tooling with Python/Go to reduce repetitive tasks and improve provisioning.
• Increase system reliability via IaC (Terraform/Ansible/SaltStack) and automation.
• Participate in on-call rotation and drive incident response improvements.
• Collaborate with Security and IT teams to enforce GDPR and Zero Trust in identity architecture.

Skills

IAM

Python

Okta/Auth0/Keycloak

SRE

HRIS integration

Education

Bachelor's degree or equivalent

Tools

Docker

Linux Containers

Terraform

Ansible

SaltStack

Jenkins/GitLab CI/CD

Git

Job description

About the Role:

We are looking for a Senior Identity Platform Engineer with focus on Identity and Access Management (IAM) to join the Corporate Engineering team. As an SRE together with other engineers you will be responsible for the continuous operation, further development and enhancement of Planet’s corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem.

This is a full-time, hybrid role which will require you to work from our Berlin, Haarlem or Ljubljana office 3 days per week.

Impact You’ll Own:

• Help to ensure the operation of Planet’s internal IT systems, specifically architecting and maintaining our identity providers (Okta, Auth0, Keycloak).
• Improve existing and create new solutions by engineering automated zero-day Joiner, Mover, and Leaver (JML) workflows directly from our HRIS (e.g., HiBob).
• Scripting & Tooling: Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization.
• Identify and reduce operational toil through automation, making our systems self-healing and predictable.
• Infrastructure as Code (IaC): Leverage APIs, Terraform, Ansible, or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across our identity platforms.
• Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA), and post-mortem processes for complex authentication failures.
• Collaborate closely with Security and other IT teams to embed reliability, scalability, and security best practices from the ground up, ensuring our identity architecture complies with GDPR and Zero Trust principles.

What You Bring:

• 6+ years experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access Management.
• Bachelor’s degree in a related field or equivalent professional experience.
• Expertise with a scripting language like Python.
• Track record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak).
• Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers).
• Solid understanding of Network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM).
• Practical understanding of PKI, certificate lifecycles (S/MIME, X.509), and managing legacy directories like Active Directory.

What Makes You Stand Out:

• Operational experience in deploying and maintaining databases.
• Experience using Docker, ECS or Linux Containers in a production environment.
• Awareness of best practices about systems security and defensive programming
• Experience with version control e.g. Git.
• Experience in deploying and maintaining virtual machines e.g. KVM, ProxMox.
• Experience with software development using CI/CD processes and tools e.g. Jenkins, GitLab.
• Experience with Access Control systems, e. g. Avigilon, Verkada or dormakaba.
• Experience with Public Key Infrastructure (PKI) and deployment automation, renewal, and revocation of personal S/MIME certificates.

Application Deadline:

11:45p / 23:45 CET on the date stated below. Applications are reviewed on a rolling basis. This posting may be removed earlier than projected if a suitable pool of applications has been received. For this reason, we recommend applying as soon as you are able to.

Export Control Requirements:

Planet Labs Germany GmbH is authorized to receive U.S. export-controlled information at Planet under an export license issued by the Bureau of Industry and Security. This position requires access to export-controlled information, and as such, employment (or hiring of a contractor) is contingent upon the candidate’s ability to access all applicable export-controlled information without additional export licensing being required by the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls.

Benefits While Working at Planet:

• Paid time off including vacation, holidays and company-wide days off
• Employee Wellness Program
• Home Office Reimbursement
• Monthly Phone and Internet Reimbursement
• Tuition Reimbursement and access to LinkedIn Learning
• Equity
• Volunteering Paid Time Off

Compensation:

The expected starting gross salary range for this role is listed below. Individual placement within this range is determined objectively based on gender-neutral criteria such as your skills, qualifications, and professional experience. This position may also be eligible for discretionary bonuses and/or equity.

Netherlands Salary Range €75.000—€93.700 EUR

San Francisco Fair Chance Ordinance

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Why we care so much about Belonging.

We’re dedicated to helping the whole Planet, and to do that we must strive to represent all of it within each of our offices and on all of our teams. That’s why Planet is guided by an ultimate north star of Belonging—dreaming big as we approach our ongoing work. At Planet, we are looking for well-rounded people from around the world who can contribute to more ways than just what is listed in this job description. We don’t just fill positions, we aspire to fulfill people’s careers, most excited about folks who are motivated by our underlying humanitarian efforts. We are a few orbits around the sun before we get to where we want to be, so we hope you’re excited to come along for the ride.

EEO statement:

Planet is committed to building a community where everyone belongs and we invite people from all backgrounds to apply. Planet is an equal opportunity employer, and committed to providing employment opportunities regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, pregnancy, childbirth and breastfeeding, age, sexual orientation, military or veteran status, or any other protected classification, in accordance with applicable federal, state, and local laws. Know Your Rights.

Accommodations:

Planet is an inclusive community and we know that everyone has their own needs. If you have a disability or special need that requires accommodation during the hiring process, please reach out to [e-mail] or contact your recruiter with your request.

AI in Our Interviewing Process

We currently use Metaview to better focus on candidates and less on trying to capture notes. As such, with the candidate's consent, select interviews may be recorded and include a 'Planet AI Notetaker' for transcription and summarization purposes. Should an interview involve use of AI interview technologies, the candidate will receive notification and have the ability to opt out both in advance and/or real-time. Opting out will not affect one's candidacy.

Candidate AI Policy

Planet embraces Artificial Intelligence (AI) tools, and we encourage its responsible use. We understand that candidates may use various resources, including AI tools, to prepare for interviews and assessments. However, during any live interview stage or when actively completing assessments for this position, the use of AI tools—e.g. Large Language Models (LLMs), deep fake technology, etc.—is strictly prohibited unless explicitly prompted by an interviewer or assessment instructions. If you are unsure about acceptable use, please contact your recruiter for clarification. If an AI tool or similar technology is desired as an accommodation, please contact [e-mail] with your request for assistance. Your message will be confidential, and we will be happy to assist you. Violation of this policy may result in disqualification of your application.