Senior Engineer – Workload Identity Platform (SPIFFESPIRE)

Pay is based on several factors which vary based on include labor markets and in some instancesmay include education work experience and addition to your pay Target cares about and invests in you as a team member so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs which may include medical vision dental life insurance and more to help you and your family take care of your whole benefits for eligible team members include 401(k) employee discount short term disability long term disability paid sick leave paid national holidays and paid competitive benefits from financial and education to well-being and beyond at Engineer Workload Identity Platform (SPIFFE/SPIRE)

About Us

Working at Target means helping all families discover the joy of everyday life. Behind the scenes our technology teams build andoperateplatforms that enable secure scalable and reliable experiences across the enterprise.

The Identity Engineering teamis responsible fordelivering modern identity capabilities that secure workloads applications and infrastructure. We are investing in cloud-native workload identity solutions that leverage SPIFFE/SPIRE and Zero Trust principles to provide secure service-to-service communication across Targets technology ecosystem.

About the Job

As a Senior Engineer on the Workload Identity Platform team you will help design build andoperateworkload identity solutions that enable secure authentication and authorization for applications and infrastructure across cloud-native environments.

You will work closely with platform engineering security infrastructure and application teams to implement and scale SPIFFE/SPIRE-based identity services integrate with Kubernetes environments and automate identity lifecycle management. You will contribute to architecture decisions lead complex technical initiatives and mentor engineers while helpingestablishbest practices for workload identity across the enterprise.

Core Responsibilities

• Design implement and support workload identity solutions using SPIFFE/SPIRE.

• Deploy configure andoperateSPIRE Server and SPIRE Agent infrastructure.

• Design and manage SPIFFE trust domains and workload identity models.

• Implement and support X.509 SVID and JWT-SVID issuance validation rotation and lifecycle management.

• Develop andmaintainworkload registration and attestation processes.

• Design and implement integrations between SPIRE Kubernetes and enterprise platforms.

• Develop custom SPIRE extensions plugins node attestors or workload attestors where.

• Partner with engineeringteams toonboard workloads and applications to workload identity services.

• Implement identity-aware authentication and authorization patterns for distributed systems.

• Troubleshoot complex identity authentication authorization andcertificatelifecycle issues.