A World-Changing Company
Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more.
The Role
As a Compliance Engineer, you will help our engineers implement Palantir Security Controls across our entire product line. You’ll work closely with many different teams to shape these controls and champion a robust & nimble approach to risk management across the company. You will navigate & interpret complex US Government regulatory frameworks (e.g. FedRAMP, CMMC, IL5, IL6) in order to provide practical guidance on technical architecture, documentation & operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently.
Core Responsibilities
Implement all aspects of US Government compliance, including FedRAMP, IL5, and IL6 continuous monitoring and compliance audits.
Support partnerships with various agencies (DoD, HHS, etc.), 3PAOs, and the FedRAMP PMO.
Partner with engineers to interpret and map compliance requirements to product implementation.
Directly facilitate operational and regulatory outcomes, including continuous monitoring and compliance audits.
Build automation for procedural compliance controls.
Guide technical and operational decision-making towards future product offerings and efficient organizational processes.
What We Value
3+ years experience with compliance (PCI, SOC2, HIPAA, etc.) with at least 2 years related to US Government compliance and audit experience (e.g FedRAMP, IL5, CMMC, FISMA, NIST 800-53, etc.).
Deep understanding of cloud infrastructure and security concepts.
Experience with distributed applications on cloud infrastructure (AWS, Azure, GCP).
Familiarity with security controls for cloud automation and configuration tooling (Terraform, Puppet, Jenkins, etc.).
Ability to clearly communicate compliance requirements to internal engineering teams and associated implementation to external customers.
Proficiency with security concepts (encryption, authentication, etc.) and tooling for continuous monitoring (Tenable, Splunk, etc.).
Hands-on experience in executing against recurring operational regulatory requirements.
Strong attention to detail.
What We Require
Willingness and eligibility to obtain a U.S. security clearance.
