Senior Engineer – Identity Platform; SPIFFE​/SPIRE

Position: Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE)
## Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE)
Apply locations:
7000 Target Pkwy N,NCD-0375 Brooklyn Park,MN 55445time type:
Full time posted on:
Posted Todayjob requisition :
RThe pay range is $98,000.00 - $Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves.

Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at
** Senior Engineer – Workload Identity Platform (SPIFFE/SPIRE)
**** About Us
** Working at Target means helping all families discover the joy of everyday life. Behind the scenes, our technology teams build and operate platforms that enable secure, scalable, and reliable experiences across the enterprise.

The Identity Engineering team is responsible for delivering modern identity capabilities that secure workloads, applications, and infrastructure. We are investing in cloud-native workload identity solutions that leverage SPIFFE/SPIRE and Zero Trust principles to provide secure service-to-service communication across Target's technology ecosystem.
** About the Job
** As a Senior Engineer on the Workload Identity Platform team, you will help design, build, and operate workload identity solutions that enable secure authentication and authorization for applications and infrastructure across cloud-native environments.

You will work closely with platform engineering, security, infrastructure, and application teams to implement and scale SPIFFE/SPIRE-based identity services, integrate with Kubernetes environments, and automate identity lifecycle management. You will contribute to architecture decisions, lead complex technical initiatives, and mentor engineers while helping establish best practices for workload identity across the enterprise.
** Core Responsibilities
*** Design, implement, and support workload identity solutions using SPIFFE/SPIRE.
* Deploy, configure, and operate SPIRE Server and SPIRE Agent infrastructure.
* Design and manage SPIFFE trust domains and workload identity models.
* Implement and support X.509 SVID and JWT-SVID issuance, validation, rotation, and lifecycle management.
* Develop and maintain workload registration and attestation processes.
* Design and implement integrations between SPIRE, Kubernetes, and enterprise platforms.
* Develop custom SPIRE extensions, plugins, node attestors, or workload attestors where required.
* Partner with engineering teams to onboard workloads and applications to workload identity services.
* Implement identity-aware authentication and authorization patterns for distributed systems.
* Troubleshoot complex identity, authentication, authorization, and certificate lifecycle issues.
* Contribute to platform automation, observability, reliability, and operational excellence.
* Participate in architecture reviews and technical design discussions.
* Mentor engineers and promote engineering best practices.
** About You
*** Four-year degree in Computer Science, Engineering, or equivalent practical experience.
* 5+ years of software engineering experience designing, developing, and supporting production systems.
* 2+ years of hands-on experience with SPIFFE/SPIRE or equivalent workload identity technologies.
* Strong software development experience in Go.
* Experience building and operating cloud-native applications and services in Kubernetes environments.
* Experience designing and troubleshooting distributed systems and microservice-based architectures.
* Experience implementing workload authentication, identity, and trust solutions for cloud-native platforms.
* Experience…