Senior Engineer, Workload Identity Platform (SPIFFE/SPIRE)

Target

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Brooklyn Park, MN
Salary
$98,000–$176,000 / yr
Employment
Full-time
Posted
137 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $184k
This role $137k
$83k $235k
below market most similar roles pay here above market

This role pays less than 88% of similar roles. Most pay $151,000–$216,062 — the blue band above. At the midpoint, this role pays about $137k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About Target

Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail

Target currently has 92 open roles on FindRole.

Listed pay typically runs $98,000–$176,000 across 67 roles with salary data.

Most-posted roles

View all roles at Target

At a glance

TL;DR · Senior Engineer, Workload Identity Platform (SPIFFE/SPIRE)

Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE) joins the Identity Engineering team to deliver modern identity capabilities for securing workloads, applications, and infrastructure. This role focuses on designing, building, and operating cloud-native workload identity solutions using SPIFFE/SPIRE and Zero Trust principles to provide secure service-to-service communication. You will deploy and operate SPIRE Server and Agent infrastructure, manage SPIFFE trust domains, and implement X.509 SVID and JWT-SVID issuance and rotation. Key responsibilities include developing custom SPIRE extensions, integrating with Kubernetes environments, and automating identity lifecycle management. Required skills include proficiency in Go, experience with Kubernetes administration, and hands-on experience with workload attestation mechanisms. You will solve complex identity and certificate lifecycle issues while mentoring engineers to establish best practices for distributed systems.

What you'll do

  • Design, implement, and support workload identity solutions using SPIFFE/SPIRE.
  • Deploy, configure, and operate SPIRE Server and SPIRE Agent infrastructure.
  • Manage SPIFFE trust domains, workload identity models, and X.509/JWT-SVID lifecycles.
  • Develop custom SPIRE extensions, plugins, and node or workload attestors.
  • Integrate SPIRE with Kubernetes environments and enterprise platforms.
  • Onboard engineering teams to workload identity services and implement authentication patterns.
  • Troubleshoot complex identity, authentication, and certificate lifecycle issues.
  • Mentor engineers and contribute to platform automation and observability.

What we're looking for

  • Four-year degree in Computer Science, Engineering, or equivalent practical experience.
  • 5+ years of software engineering experience designing, developing, and supporting production systems.
  • 2+ years of hands-on experience with SPIFFE/SPIRE or equivalent workload identity technologies.
  • Strong proficiency in Go for building APIs, services, and distributed systems.
  • Experience building and operating cloud-native applications and services in Kubernetes environments.
  • Experience designing and troubleshooting distributed systems and microservice-based architectures.
  • Experience implementing workload authentication, identity, and trust solutions for cloud-native platforms.
  • Experience with Linux environments, CI/CD automation, and deployment pipelines.

More like this

Similar roles

Senior Security Engineer, Identity

Anduril Industries

Washington, District of Columbia +1 21 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD AWS Azure GCP RBAC ABAC OPA Cedar Policy-as-Code

Senior Security Engineer, Identity

Anduril Industries

Boston, MA +1 21 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP Infrastructure as Code

Senior Security Engineer, Identity

Anduril Industries

Seattle, WA +1 21 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD AWS Azure GCP RBAC ABAC OPA Cedar Infrastructure as Code

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA 145 days ago $166,000–$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP

Senior Engineer, Information Security

Carvana

Tempe, AZ 15 days ago
Security Architecture AI LLM Security Engineering RESTful APIs Threat Modeling API Integration NIST AI Risk Management Framework OWASP Top 10 for LLM Applications Scripting Software Development Automation
5+ yrs exp