Senior Site Reliability Engineer

## About the Role Planet is looking for a Senior Reliability Engineer with focus on Identity and Access Management (IAM) to join the Corporate Engineering team. As an SRE, you will be responsible for the continuous operation, further development and enhancement of Planet's corporate infrastructure and applications, acting as the technical authority for the enterprise identity ecosystem. This is a full-time, hybrid role which requires working from the Berlin, Haarlem or Ljubljana office 3 days per week. ## Impact You'll Own - Help ensure the operation of Planet's internal IT systems, specifically architecting and maintaining identity providers (Okta, Auth0, Keycloak). - Improve existing and create new solutions by engineering automated zero-day Joiner, Mover and Leaver (JML) workflows directly from the HRIS (e.g. HiBob). - Use Python or Go to automate repetitive tasks, build custom provisioning connectors for legacy applications, and enforce identity data minimization. - Identify and reduce operational toil through automation, making systems self-healing and predictable. - Leverage APIs, Terraform, Ansible or SaltStack to manage configurations as code, moving away from manual UI/CLI changes across identity platforms. - Participate in an on-call rotation and drive the continuous improvement of incident response, root cause analysis (RCA) and post-mortem processes for complex authentication failures. - Collaborate closely with Security and other IT teams to embed reliability, scalability and security best practices, ensuring the identity architecture complies with GDPR and Zero Trust principles. ## What You Bring - 6+ years experience in infrastructure development and/or operations, with a dedicated focus on Identity and Access Management. - Bachelor's degree in a related field or equivalent professional experience. - Expertise with a scripting language like Python. - Track record of working with large web applications or computer clusters and managing complex identity architectures (Okta, Auth0, Keycloak). - Experience integrating HR Information Systems with identity directories and handling complex edge cases (re-hires, cross-border transfers). - Solid understanding of network principles and operations alongside modern identity protocols (OAuth 2.0, OIDC, SAML, SCIM). - Practical understanding of PKI, certificate lifecycles (S/MIME, X.509) and managing legacy directories like Active Directory. ## What Makes You Stand Out - Operational experience in deploying and maintaining databases. - Experience with Docker, ECS or Linux containers in production. - Awareness of systems security and defensive programming best practices. - Experience with version control (Git). - Experience deploying and maintaining virtual machines (KVM, ProxMox). - Experience in software development using CI/CD processes and tools (Jenkins, GitLab). - Experience with access control systems (Avigilon, Verkada, dormakaba). - Experience with PKI and deployment automation, renewal and revocation of personal S/MIME certificates. ## Conditions - Applications are reviewed on a rolling basis; the posting may be removed earlier than projected. - Export control requirements apply: employment is contingent upon the candidate's ability to access all applicable export-controlled information without additional licensing (Planet Labs Germany GmbH is authorized to receive U.S. export-controlled information under a license from the Bureau of Industry and Security).