Senior Site Reliability Engineer

Academic Key; Haarlem; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Office in Haarlem

Job summary

Planet Labs Germany GmbH is seeking a Senior Reliability Engineer focused on Identity and Access Management to join the Corporate Engineering team. You will own operation of internal IT systems and identity providers, and automate workflows to improve reliability in a hybrid setup with offices in Haarlem, Berlin and Ljubljana.

The role requires 6+ years in infra with IAM, experience with Okta/Auth0/Keycloak, and strong scripting in Python, plus IaC with Terraform/Ansible.

Qualifications

• 6+ years in infra development/operations with IAM focus.
• Experience with Okta/Auth0/Keycloak and large web apps.
• HRIS integration with identity directories and edge cases.
• Familiar with OAuth 2.0, OIDC, SAML, SCIM; PKI concepts.

Responsibilities

• Own operation of internal IT systems and identity providers.
• Automate Joiner/Mover/Leaver workflows from HRIS.
• Develop IaC configurations to manage identity platforms.
• Participate in on-call, RCA, and post-mortems for auth issues.
• Collaborate with Security and IT to enforce Zero Trust.

Skills

Identity & Access Management

Python scripting

Infrastructure as Code

On-call incident response

Education

Bachelor's degree in a related field

Tools

Terraform

Ansible

SaltStack

Kubernetes

Git

Job description

Welcome to Planet. We believe in using space to help life on Earth. Planet designs, builds, and operates the largest constellation of imaging satellites in history. This constellation delivers an unprecedented dataset of empirical information via a revolutionary cloud-based platform to authoritative figures in commercial, environmental, and humanitarian sectors. We are both a space company and data company all rolled into one. Customers and users across the globe use Planet's data to develop new technologies, drive revenue, power research, and solve our world’s toughest obstacles. As we control every component of hardware design, manufacturing, data processing, and software engineering, our office is a truly inspiring mix of experts from a variety of domains. We have a people-centric approach toward culture and community and we strive to iterate in a way that puts our team members first and prepares our company for growth. Join Planet and be a part of our mission to change the way people see the world. Planet is a global company with employees working remotely world wide and joining us from offices in San Francisco, Washington DC, Germany, Austria, Slovenia, and The Netherlands. About the Role: We are looking for a Senior Reliability Engineer with focus on Identity and Access Management (IAM) to join the Corporate Engineering team. As an SRE together with other engineers you will be responsible for the continuous operation, further development and enhancement of Planet’s corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem. This is a full-time, hybrid role which will require you to work from our Berlin, Haarlem or Ljubljana office 3 days per week. Impact You’ll Own: Help to ensure the operation of Planet’s internal IT systems, specifically architecting and maintaining our identity providers (Okta, Auth0, Keycloak). Improve existing and create new solutions by engineering automated zero-day Joiner, Mover, and Leaver (JML) workflows directly from our HRIS (e.g., HiBob). Scripting & Tooling: Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization. Identify and reduce operational toil through automation, making our systems self-healing and predictable. Infrastructure as Code (IaC): Leverage APIs, Terraform, Ansible, or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across our identity platforms. Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA), and post-mortem processes for complex authentication failures. Collaborate closely with Security and other IT teams to embed reliability, scalability, and security best practices from the ground up, ensuring our identity architecture complies with GDPR and Zero Trust principles. What You Bring: 6+ years experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access Management. Bachelor’s degree in a related field or equivalent professional experience. Expertise with a scripting language like Python. Track record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak). Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers). Solid understanding of Network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM). Practical understanding of PKI, certificate lifecycles (S/MIME, X.509), and managing legacy directories like Active Directory. What Makes You Stand Out: Operational experience in deploying and maintaining databases. Experience using Docker, ECS or Linux Containers in a production environment. Awareness of best practices about systems security and defensive programming Experience with version control e.g. Git. Experience in deploying and maintaining virtual machines e.g. KVM, ProxMox. Experience in software development using CI/CD processes and tools e.g. Jenkins, GitLab. Experience with Access Control systems, e. g. Avigilon, Verkada or dormakaba. Experience with Public Key Infrastructure (PKI) and deployment automation, renewal, and revocation of personal S/MIME certificates. Application Deadline: 11:45p / 23:45 CET on the date stated below. Applications are reviewed on a rolling basis. This posting may be removed earlier than projected if a suitable pool of applications has been received. For this reason, we recommend applying as soon as you are able to. Export Control Requirements: Planet Labs Germany GmbH is authorized to receive U.S. export-controlled information at Planet under an export license issued by the Bureau of Industry and Security. This position requires access to export-controlled information, and as such, employment (or hiring of a co