Senior IT Engineer, Identity and Access Management

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Define the identity and access management framework at 1Password.

• Drive IAM projects from initial conception to full implementation.

• Manage and enhance Okta, including tenant setup, policies, lifecycle management, and resolving complex identity challenges.

• Establish role-based access control, conduct access reviews, and automate onboarding and offboarding processes.

• Develop safeguards that ensure identity and access modifications are secure and easily audited.

• Create application integrations utilizing SAML, OIDC, SCIM, and bespoke APIs.

• Streamline access requests and processes related to employee lifecycle.

• Collaborate with IT, Security, and Device Infrastructure teams on deployments, risk management, identity practices, audits, and compliance.

• Take part in the on-call rotation.

• Offer expertise on identity and access inquiries throughout 1Password.

• Enhance infrastructure as code and AI-driven workflows within IT.

⛳️ Requirements

• Extensive experience in a technical IT position, including IT engineering or systems administration.

• Hands-on administration of Okta or a similar Identity Provider like Microsoft Entra ID.

• Proficiency with SAML, OIDC, and SCIM identity protocols.

• Background in creating integrations and automation using REST APIs.

• Scripting skills in Python and Bash.

• Experience with infrastructure or configuration as code, utilizing Git-based workflows, pull requests, and code reviews.

• Familiarity with applying AI to enhance or replace team workflows.

• Proven track record in managing project timelines, risks, stakeholder communications, and organizational change.

• Experience in managing an IdP with Terraform, utilizing 1Password Enterprise and Device Trust, or supporting SOC 2, SOX, or ISO 27001 audits.

• Candidates must reside in and be legally authorized to work in the United States or Canada.

• No work authorization, relocation assistance, or visa sponsorship will be provided.

• Successful candidates will need to pass a background check.

🏝️ Benefits

• Comprehensive health benefits.

• Dental coverage.

• 401(k) or RRSP retirement plans, based on geographical location.

• Generous paid time off policy.

• Equity grants / RSU programs available for most employees.

• Incentive programs, where applicable.

• Maternity and parental leave top-up initiatives.

• Retirement matching contributions.

• Complimentary 1Password account.

• Paid volunteer days.

• Peer-to-peer recognition through Bonusly.

• Remote-first working environment.

• Opportunities for travel for in-person engagements, including annual department-wide offsites, team meetings, and customer/industry events.

• Accommodations available upon request during the recruitment process.