Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE)
Core
Design, build, and operate workload identity solutions using SPIFFE/SPIRE to enable secure service-to-service communication across Target's cloud-native technology ecosystem.
Role type
Senior IC Platform Engineer (Workload Identity)
Builds
SPIFFE/SPIRE-based identity services, custom plugins, node attestors, and integrations for Kubernetes environments.
Domain
Cloud-native infrastructure, Zero Trust security, Identity & Access Management (IAM)
Deliverable
production ML models | product features | infrastructure
Required skills
Go, SPIFFE/SPIRE, Kubernetes, X.509 SVID/JWT-SVID lifecycle, workload/node attestation, distributed systems, CI/CD automation
Preferred skills
Istio, Linkerd, Envoy, mTLS, Open Policy Agent (OPA), PKI, Java/Python, multi-cluster architectures
Technologies
SPIFFE, SPIRE, Kubernetes, Helm, Go, Linux, X.509, JWT
Responsibilities
Design and implement workload identity models and trust domains; Deploy and operate SPIRE Server and Agents; Develop custom SPIRE extensions and attestors; Integrate identity services with Kubernetes and enterprise platforms; Troubleshoot complex identity and certificate lifecycle issues; Mentor engineers and establish best practices.
Seniority
Senior, hands-on IC
