Staff Developer, Authentication Enablement

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Assist in transitioning authentication from the monolithic architecture to a standalone service with its own database.

• Incrementally migrate authentication endpoints and tables using weighted rollouts, consistency checks, and well-tested rollback strategies.

• Define the technical direction for the migration and the new authentication services, including trusted access for AI agents.

• Lead a portion of the authentication service roadmap for the upcoming 12 months.

• Take ownership of designs for session and device management processes, source-of-truth transitions, and authentication event publishing.

• Make and document technical decisions while balancing reliability, security, and timely delivery.

• Establish standards for testing, observability, and safe rollout procedures.

• Develop essential platform components and promote distributed-system standards in collaboration with other teams.

• Collaborate with Authorization, Identity Services, and Security teams.

• Guide product teams in integrating features that rely on authentication.

• Employ human judgment and thorough validation in AI-assisted security-critical code.

• Participate in the 24/7 on-call rotation for tier-one services.

⛳️ Requirements

• Extensive experience in building and managing backend services.

• Profound expertise in distributed systems and data management, including live traffic or data migrations without downtime, event streaming, or change data capture, ensuring consistency across sources of truth.

• Strong background in designing asynchronous workflows and transitioning synchronous, large-transaction processes to eventually consistent architectures.

• Practical knowledge of OAuth, OIDC, WebAuthn, passkeys, or MFA, including potential implementation challenges and security concerns.

• Proven history of setting technical direction, overseeing large multi-quarter projects, writing technical specifications, and articulating trade-offs.

• Experience in mentoring engineers through reviews and design feedback.

• Significant experience with Go or another backend programming language such as Java, C#, Rust, C++, or Python is advantageous.

• Previous experience in extracting services from a monolithic architecture is a plus.

• Familiarity with MySQL, Redis, Kafka, and DynamoDB at scale is beneficial.

• Knowledge of the Secure Remote Password protocol is a bonus.

• Experience managing services with strict availability targets, including SLOs, on-call duties, and incident response is advantageous.

• Must possess legal authorization to work in the United States or Canada; 1Password does not provide work authorization, relocation assistance, or visa sponsorship/transfers.

• Participation in a 24/7 on-call rotation for tier-one services is required.

🏝️ Benefits

• Health benefits.

• Dental benefits.

• 401(k) (USA) / RRSP (Canada).

• Generous paid time off.

• Equity grant / RSU program.

• Incentive programs, where applicable.

• Maternity and parental leave top-up programs.

• Retirement matching program.

• Free 1Password account.

• Paid volunteer days.

• Peer-to-peer recognition through Bonusly.

• Remote-first work environment.

• Opportunities for travel for in-person engagement, including offsites, team meetings, and customer/industry events.