This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
As a Security Engineer on the Corporate Security team, you will contribute to the implementation and improvement of identity and access management solutions across 1Password. You will work closely with IT Engineering and other members of the Corporate Security team to support authentication, access controls, identity lifecycle management, and secure access to internal and SaaS systems. This role offers hands-on technical work, opportunities to automate and improve identity workflows, and space to grow your skills alongside more senior engineers.
Job Responsibility:
Work as part of the Identity Security squad, driving improvements to identity processes to ensure secure and efficient access for employees, contractors, and non-human users
Collaborate closely with IT Engineering’s Identity squad to support identity lifecycle management, access provisioning/deprovisioning automation, and alignment on identity roadmap priorities
Use and help improve 1Password’s identity-related products (1Password, Trelica, Kolide), acting as a customer zero by dogfooding features, identifying gaps, and providing actionable feedback to product and engineering teams
Assist in developing and maintaining configuration standards and governance for identity platforms, including detection and remediation of configuration drift
Leverage scripting, automation, and configuration as code to make identity management more scalable, repeatable, and auditable
Partner with other Corporate Security squads (SaaS and Endpoint Security) to address overlapping responsibilities and ensure identity controls are effectively integrated into broader security initiatives
Work cross-functionally with Procurement and GRC to align identity controls with vendor onboarding, compliance needs, and organizational risk posture
Support identity-related projects from planning through execution - coordinating with IT Engineering and application owners, ensuring deliverables meet security and business requirements
Participate in security audits, tabletop exercises, and identity-related incident response activities
Grow your skills through mentorship and collaboration, contributing to the overall maturity of the Corporate Security team while being supported in your own professional development
Requirements:
3–5 years of combined experience in IT or security, with a focus on corporate or enterprise identity management
Hands-on experience administering and securing identity providers such as Okta, Google Workspace, or Azure AD, including SSO, federation, MFA, and SCIM provisioning and access policies
Strong understanding of identity security fundamentals, including RBAC, access governance, lifecycle management, and how identity underpins secure SaaS adoption
Experience working in a remote-first environment where identity and device posture form the basis of access control. Hands-on experience configuring or supporting conditional access policies, leveraging device posture signals (via tools such as Kandji, Jamf, CrowdStrike, or SentinelOne), and working with ZTNA or modern VPN solutions (e.g., Tailscale, Twingate, Palo Alto Prisma Access, Zscaler)
Experience using scripting or automation (e.g., Python, Bash, Terraform) to support identity operations, configuration as code (CaC), or workflow automation
Strong collaboration and communication skills, with the ability to work effectively within the Identity squad, across IT Engineering, and with partner teams such as Procurement and GRC
A growth mindset, ownership mentality, and a commitment to developing skills while contributing to the maturity of the Corporate Security team
Nice to have:
familiarity with SOAR platforms (Tines, Torq, Splunk) is a plus
Experience being “customer zero” - dogfooding security or identity products internally, and providing feedback to improve both internal use and customer-facing value