About the role

Senior IT Engineer leading IAM, Okta, and secure access automation for 1Password’s enterprise password and Unified Access Management platform. Expanding IaC and AI-enabled IT workflows.

Responsibilities

Shape identity and access management across 1Password
Lead IAM initiatives from concept through rollout
Operate and improve Okta, including tenant configuration, policies, lifecycle management, and complex identity issues
Implement role-based access control, access reviews, and onboarding/offboarding automation
Build safeguards that make identity and access changes safer to deploy and easier to audit
Design application integrations using SAML, OIDC, SCIM, and custom APIs
Simplify access requests and employee lifecycle processes
Partner with IT, Security, and Device Infrastructure teams on rollouts, risk management, identity practices, audit, and compliance
Participate in the on-call rotation
Provide guidance on identity and access questions across 1Password
Expand infrastructure as code and AI-enabled workflows across IT

Substantial experience in a technical IT role, including IT engineering or systems administration
Production administration of Okta or a comparable Identity Provider such as Microsoft Entra ID
Experience with SAML, OIDC, and SCIM identity protocols
Experience building integrations and automation using REST APIs
Scripting experience with Python and Bash
Experience using infrastructure or configuration as code with Git-based workflows, pull requests, and code review
Experience applying AI to accelerate or replace team workflows
Experience managing project timelines, risks, stakeholder communication, and organizational change
Experience managing an IdP with Terraform, using 1Password Enterprise and Device Trust, or supporting SOC 2, SOX, or ISO 27001 audits
Must live in and be legally authorized to work in the United States or Canada
No work authorization, relocation assistance, or visa sponsorship provided
Successful applicants must complete a background check

Health benefits
Dental benefits
401(k) or RRSP retirement program, depending on location
Generous paid time off
Equity grant / RSU program for most employees
Incentive programs, where applicable
Maternity and parental leave top-up programs
Retirement matching program
Free 1Password account
Paid volunteer days
Peer-to-peer recognition through Bonusly
Remote-first work environment
Travel for in-person engagement, including annual department-wide offsites, team meetings, and customer/industry events
Accommodation available upon request during recruitment