[Hiring] Senior IT Engineer, Identity and Access Management @1Password

Role Description

As a Senior IT Engineer on the IT Engineering team, you’ll shape how identity and access work across 1Password. You’ll lead Identity and Access Management (IAM) initiatives, improve our Okta environment, and help expand Infrastructure as Code (IaC) and artificial intelligence (AI)-enabled workflows across IT. Your work will make secure access simpler and more reliable, helping advance 1Password’s mission to create a safer, simpler digital future for everyone.

Qualifications

• Substantial experience in a technical IT role, including IT engineering or systems administration.
• Experience administering Okta or a comparable Identity Provider (IdP), such as Microsoft Entra ID, in a production environment.
• Knowledge of identity protocols including Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and System for Cross-domain Identity Management (SCIM).
• Experience building integrations and automation using Representational State Transfer (REST) APIs and scripting languages such as Python and Bash.
• Experience using infrastructure or configuration as code with Git-based workflows, including pull requests and code review.
• Experience applying AI to accelerate or replace team workflows, while managing project timelines, risks, stakeholder communication, and organizational change.
• Experience managing an IdP with Terraform, using 1Password Enterprise and Device Trust, or supporting Service Organization Control 2 (SOC 2), Sarbanes-Oxley (SOX), or ISO 27001 audits.

Requirements

• Operate and improve Okta, including tenant configuration, policies, lifecycle management, and complex identity issues.
• Lead IAM initiatives from concept through rollout, including role-based access control, access reviews, and onboarding and offboarding automation.
• Build safeguards that make identity and access changes safer to deploy and easier to audit.
• Design durable application integrations using SAML, OIDC, SCIM, and custom API work where needed.
• Simplify access requests and employee lifecycle processes so secure workflows are also efficient workflows.
• Partner with IT, Security, and Device Infrastructure teams to plan rollouts, manage risk, establish identity practices, and support audit and compliance work.
• Participate in the on-call rotation and provide clear guidance on identity and access questions across 1Password.

Benefits

• USA-based roles: Annual base salary between $117,000 USD and $164,000 USD, plus participation in benefits program (health, dental, 401k, etc.), generous paid time off, equity grant, and incentive programs.
• Canada-based roles: Annual base salary between $103,000 CAD and $144,000 CAD, plus participation in benefits program (health, dental, RRSP, etc.), generous paid time off, equity grant, and incentive programs.
• Health and wellbeing: Maternity and parental leave top-up programs, competitive health benefits, generous PTO policy.
• Growth and future: RSU program for most employees, retirement matching program, free 1Password account.
• Community: Paid volunteer days, peer-to-peer recognition through Bonusly, remote-first work environment.