Senior Site Reliability Engineer

We are looking for a Senior Reliability Engineer with focus on Identity and Access Management (IAM) to join the Corporate Engineering team. As an SRE together with other engineers you will be responsible for the continuous operation, further development and enhancement of Planet's corporate infrastructure and applications, acting as the technical authority for our enterprise identity ecosystem.

This is a full-time, hybrid role which will require you to work from our Berlin, Haarlem or Ljubljana office 3 days per week.

• Help to ensure the operation of Planet's internal IT systems, specifically architecting and maintaining our identity providers (Okta, Auth0, Keycloak).
• Improve existing and create new solutions by engineering automated zero-day Joiner, Mover, and Leaver (JML) workflows directly from our HRIS (e.g., HiBob).
• Scripting & Tooling: Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization.
• Identify and reduce operational toil through automation, making our systems self-healing and predictable.
• Infrastructure as Code (IaC): Leverage APIs, Terraform, Ansible, or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across our identity platforms.
• Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA), and post-mortem processes for complex authentication failures.
• Collaborate closely with Security and other IT teams to embed reliability, scalability, and security best practices from the ground up, ensuring our identity architecture complies with GDPR and Zero Trust principles.

• 6+ years experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access Management.
• Bachelor's degree in a relevant field.
• Expertise with a scripting language like Python.
• Track record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak).
• Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers).
• Solid understanding of Network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM).
• Practical understanding of PKI, certificate lifecycles (S/MIME, X.509), and managing legacy directories like Active Directory.
• Operational experience in deploying and maintaining databases.
• Experience using Docker, ECS or Linux Containers in a production environment.
• Awareness of best practices about systems security and defensive programming
• Experience with version control e.g. Git.
• Experience in deploying and maintaining virtual machines e.g. KVM, ProxMox.
• Experience in software development using CI/CD processes and tools e.g. Jenkins, GitLab.
• Experience with Access Control systems, e. g. Avigilon, Verkada or dormakaba.
• Experience with Public Key Infrastructure (PKI) and deployment automation, renewal, and revocation of personal S/MIME certificates.

• Paid time off including vacation, holidays and company-wide days off
• Employee Wellness Program
• Home Office Reimbursement
• Monthly Phone and Internet Reimbursement
• Tuition Reimbursement and access to LinkedIn Learning
• Equity
• Volunteering Paid Time Off