Productive businesses use 1Password to secure employees at scale.

Security Engineer, Corporate Security

Security EngineerSecurity EngineerFull TimeRemoteTeam 501-1,000Since 2009H1B SponsorCompany Site LinkedIn

Location

United States

Posted

88 days ago

Salary

$123K - $167K / year

Bachelor Degree3 yrs expEnglishAzureJamfPythonSplunkTerraform

Job Description

• This role will focus on securing and improving our identity ecosystem. • The engineer will work primarily with our identity provider (such as Okta, Google Workspace, and Azure AD), as well as with IT Engineering’s Identity squad to strengthen authentication, access provisioning, and access control. • They will also help dogfood and improve our identity-related products, including Trelica, 1Password, and Kolide. • This engineer should be comfortable working in evolving problem spaces, proactively driving tasks and small projects to completion, and collaborating effectively with partner teams. • The role requires hands-on technical expertise, opportunities to automate and improve identity processes, and the ability to grow skills through mentorship and collaboration with more senior engineers. • Potential work on nights or weekends in the event a significant security issue is discovered.

Job Requirements

3–5 years of combined experience in IT or security, with a focus on corporate or enterprise identity management.
Hands-on experience administering and securing identity providers such as Okta, Google Workspace, or Azure AD, including SSO, federation, MFA, and SCIM provisioning and access policies.
Strong understanding of identity security fundamentals, including RBAC, access governance, lifecycle management, and how identity underpins secure SaaS adoption.
Experience working in a remote-first environment where identity and device posture form the basis of access control. Hands-on experience configuring or supporting conditional access policies, leveraging device posture signals (via tools such as Kandji, Jamf, CrowdStrike, or SentinelOne), and working with ZTNA or modern VPN solutions (e.g., Tailscale, Twingate, Palo Alto Prisma Access, Zscaler).
Experience using scripting or automation (e.g., Python, Bash, Terraform) to support identity operations, configuration as code (CaC), or workflow automation; familiarity with SOAR platforms (Tines, Torq, Splunk) is a plus.
Experience being “customer zero” - dogfooding security or identity products internally, and providing feedback to improve both internal use and customer-facing value.
Strong collaboration and communication skills, with the ability to work effectively within the Identity squad, across IT Engineering, and with partner teams such as Procurement and GRC.
A growth mindset, ownership mentality, and a commitment to developing skills while contributing to the maturity of the Corporate Security team.