Senior Engineer - Workload Identity Platform (SPIFFE/SPIRE)

Target

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Brooklyn Park, MN
Salary
$98,000–$176,000 / yr
Posted
91 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $168k
This role $137k
$85k most similar roles pay here $223k

This role pays less than 89% of similar roles. Most pay $144,350–$191,595 — the shaded band above. At the midpoint, this role pays about $137k versus about $168k for comparable roles.

Based on 240 similar postings.

Employer

About Target

Target Corporation is a large-format general merchandise and grocery retailer offering a wide assortment of everyday essentials, apparel, home goods, and electronics through stores and online. Industry: General Merchandise Retail

Target currently has 58 open roles on FindRole.

Listed pay typically runs $98,000–$176,000 across 58 roles with salary data.

Most-posted roles

View all roles at Target

At a glance

TL;DR · Senior Engineer - Workload Identity Platform (SPIFFE/SPIRE)

Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE) joins the Identity Engineering team to design, build, and operate workload identity solutions for cloud-native environments. This role focuses on providing secure authentication and authorization for applications and infrastructure by implementing SPIFFE/SPIRE-based identity services and integrating them with Kubernetes environments. The engineer will manage SPIRE Server and Agent infrastructure, handle X.509 SVID and JWT-SVID lifecycle management, and develop custom SPIRE extensions or node attestors. Key technical requirements include proficiency in Go, experience with Linux systems, and expertise in Kubernetes administration using Helm for configuration management. The role addresses the challenge of securing service-to-service communication through Zero Trust principles. Candidates will also manage trust domains, automate identity lifecycle processes, and troubleshoot complex certificate issues while mentoring other engineers to establish best practices across the enterprise's distributed systems.

What you'll do

  • Design, implement, and support workload identity solutions using SPIFFE/SPIRE.
  • Deploy, configure, and operate SPIRE Server and SPIRE Agent infrastructure.
  • Manage X.509 SVID and JWT-SVID issuance, validation, rotation, and lifecycle management.
  • Develop custom SPIRE extensions, plugins, node attestors, or workload attestors as required.
  • Integrate SPIRE with Kubernetes environments and other enterprise platforms.
  • Build and maintain automated processes for workload registration and attestation.
  • Troubleshoot complex identity, authentication, authorization, and certificate lifecycle issues.
  • Mentor engineers and establish best practices for workload identity across the enterprise.

What we're looking for

  • A four-year degree in Computer Science, Engineering, or equivalent practical experience is required.
  • Candidates must have 5+ years of software engineering experience designing, developing, and supporting production systems.
  • Candidates must have 2+ years of hands-on experience with SPIFFE/SPIRE or equivalent workload identity technologies.
  • Strong proficiency in Go for building APIs, services, and distributed systems is required.
  • Experience building and operating cloud-native applications and services in Kubernetes environments is required.
  • Experience designing and troubleshooting distributed systems and microservice-based architectures is required.
  • Experience implementing workload authentication, identity, and trust solutions for cloud-native platforms is required.
  • Experience developing APIs, integrations, or platform services that operate at scale is required.

More like this

Similar roles

Senior Engineer - CircleCard Platform

Target

Brooklyn Park, MN 10 days ago $98,000$176,000
Kotlin Java Micronaut Spring Boot Python PostgreSQL Redis Kafka GraphQL REST Docker Kubernetes CI/CD OpenTelemetry RAG LangChain CrewAI MCP Distributed Systems
5+ yrs exp Hybrid

Software Engineering PMTS, Enterprise PKI

Salesforce

Remote (Bellevue, WA) 10 days ago $197,300$313,700
PKI EJBCA X.509 ACME EST CMP mTLS Post-Quantum Cryptography AWS Azure GCP Golang Python CI/CD Git Linux Kubernetes Istio SPIRE HSM Zero Trust
10+ yrs exp Remote

Senior Software Engineer, Identity Platform

Upstart

Remote (Canada) 81 days ago $166,900$230,900
Kotlin Java Ruby C# OAuth 2.0 OpenID Connect SAML Docker Kubernetes gRPC Keycloak NextJS A/B Testing DevOps IAM Cursor Claude Code
4+ yrs exp Remote

Senior Cybersecurity Engineer, Identity Platform and Access Management

Nvidia

Santa Clara, CA 30 days ago $196,000$310,500
IAM OAuth 2.0 OIDC SAML Zero Trust Identity Governance Privileged Identity Management Conditional Access Directory Services Token Services SDKs Infrastructure Engineering Platform Engineering Security Architecture Federated Identity Device Attestation
10+ yrs exp

Senior Security Engineer, Identity

Anduril Industries

Costa Mesa, CA +2 99 days ago $166,000$220,000
Identity and Access Management Go Rust Terraform AWS CDK SAML OIDC SCIM OAuth Okta Azure AD CI/CD RBAC ABAC OPA Cedar AWS Azure GCP