Senior Site Reliability Engineer Verified today
About the Role
Join the Corporate Engineering team as a Senior Reliability Engineer with focus on Identity and Access Management (IAM). You will be responsible for the continuous operation, development and enhancement of Planet's corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem.
This is a full-time, hybrid role based in Berlin, Haarlem or Ljubljana, requiring 3 days per week on-site.
Impact You'll Own
- Architect and maintain Planet's identity providers (Okta, Auth0, Keycloak) to ensure reliable operation of internal IT systems.
- Engineer automated zero-day Joiner, Mover, and Leaver (JML) workflows directly from our HRIS (e.g., HiBob).
- Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization.
- Identify and reduce operational toil through automation, making systems self-healing and predictable.
- Leverage APIs, Terraform, Ansible, or SaltStack to manage Infrastructure as Code, moving away from manual UI/CLI changes across identity platforms.
- Participate in on-call rotation and drive continuous improvement of incident response, root cause analysis, and post-mortem processes for authentication failures.
- Collaborate with Security and IT teams to embed reliability, scalability, and security best practices, ensuring identity architecture complies with GDPR and Zero Trust principles.
What You Bring
- 6+ years experience in infrastructure development and/or operations, with dedicated focus on Identity and Access Management.
- Bachelor's degree in a related field or equivalent professional experience.
- Expertise with a scripting language like Python.
- Track record working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak).
- Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers).
- Solid understanding of Network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM).
- Practical understanding of PKI, certificate lifecycles (S/MIME, X.509), and managing legacy directories like Active Directory.
What Makes You Stand Out
- Operational experience in deploying and maintaining databases.
- Experience using Docker, ECS or Linux Containers in a production environment.
- Awareness of best practices about systems security and defensive programming.
- Experience with version control e.g. Git.
- Experience in deploying and maintaining virtual machines e.g. KVM, ProxMox.
- Experience in software development using CI/CD processes and tools e.g. Jenkins, GitLab.
- Experience with Access Control systems, e.g. Avigilon, Verkada or dormakaba.
- Experience with Public Key Infrastructure (PKI) and deployment automation, renewal, and revocation of personal S/MIME certificates.
Compensation and Benefits
The expected starting gross salary range for this role is EUR 77,000 to EUR 96,300. Individual placement within this range is determined based on skills, qualifications, and professional experience. This position may also be eligible for discretionary bonuses and/or equity.
Benefits include paid time off, Employee Wellness Program, Home Office Reimbursement, Monthly Phone and Internet Reimbursement, Tuition Reimbursement and access to LinkedIn Learning, Equity, and Volunteering Paid Time Off. Benefits offerings are dependent on employment type and geographical location.
Export Control
Planet Labs Germany GmbH is authorized to receive U.S. export-controlled information under an export license issued by the Bureau of Industry and Security. This position requires access to export-controlled information. Employment is contingent upon the candidate's ability to access all applicable export-controlled information without additional export licensing being required by the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls.