1Password is looking for a Security Engineer, Corporate Security to focus on securing and improving our identity ecosystem. You will work closely with identity providers and IT Engineering to strengthen authentication, access provisioning, and control, while also dogfooding our identity-related products.
What You'll Do
- Work as part of the Identity Security squad, driving improvements to identity processes to ensure secure and efficient access for employees, contractors, and non-human users.
- Collaborate closely with IT Engineering’s Identity squad to support identity lifecycle management, access automation, and roadmap alignment.
- Use and help improve 1Password’s identity-related products, acting as a customer zero by dogfooding features and providing actionable feedback.
- Assist in developing and maintaining configuration standards and governance for identity platforms, including detection and remediation of configuration drift.
- Leverage scripting, automation, and configuration as code to make identity management more scalable, repeatable, and auditable.
- Partner with other Corporate Security squads to ensure identity controls are integrated into broader security initiatives.
- Work cross-functionally with Procurement and GRC to align identity controls with vendor onboarding and compliance needs.
- Support identity-related projects from planning through execution, coordinating with stakeholders to ensure deliverables meet requirements.
- Participate in security audits, tabletop exercises, and identity-related incident response.
- Grow skills through mentorship and contribute to the maturity of the Corporate Security team.
What We're Looking For
- 3–5 years of combined experience in IT or security, with a focus on corporate or enterprise identity management.
- Hands-on experience administering and securing identity providers such as Okta, Google Workspace, or Azure AD.
- Strong understanding of identity security fundamentals, including RBAC, access governance, lifecycle management, and its role in SaaS adoption.
- Experience working in a remote-first environment where identity and device posture form the basis of access control.
- Experience using scripting or automation to support identity operations, configuration as code, or workflow automation.
- Strong collaboration and communication skills, with the ability to work effectively across teams.
- A growth mindset, ownership mentality, and a commitment to developing skills and team maturity.
Nice to Have
- Hands-on experience configuring conditional access policies, leveraging device posture signals, and working with ZTNA or modern VPN solutions.
- Familiarity with SOAR platforms.
- Experience being 'customer zero' by dogfooding security or identity products and providing feedback.
Technical Stack
- Identity: Okta, Google Workspace, Azure AD
- Automation/Scripting: Python, Bash, Terraform, CI/CD
- Endpoint: Kandji, Jamf, CrowdStrike, SentinelOne
- Network Access: Tailscale, Twingate, Palo Alto Prisma Access, Zscaler
- SOAR: Tines, Torq, Splunk
- Internal Tools: Trelica, Kolide
Team & Environment
You will be part of the Corporate Security team, specifically the Identity Security squad, reporting to Chris Butler, Manager, Corporate Security. You will work closely with IT Engineering’s Identity squad and other Corporate Security squads.
Benefits & Compensation
- Salary Range: USA: $123,000 USD - $167,000 USD annually; Canada: $111,000 CAD - $150,000 CAD annually
- Equity grant
- Health, dental, and vision benefits
- 401k/RRSP with retirement matching
- Generous PTO policy
- Maternity and parental leave top-up programs
- Paid volunteer days
- Free 1Password account
- Peer-to-peer recognition through Bonusly
- Incentive programs
Work Mode
This is a remote-first position open to candidates in Canada and the US.
1Password is an equal opportunity employer, committed to fostering an inclusive, diverse and equitable workplace.
