1

1Password

Builds password and access security tools

Staff Developer - Authentication Enablement

Backend EngineeringPosted on Nov 11
Full-time

About the Job

Requirements

  • Significant experience building and operating backend services.
  • Deep expertise with distributed systems and data, including moving live traffic or data between systems without downtime, event streaming or change data capture, and maintaining consistency between two sources of truth through a cutover.
  • Strong experience designing asynchronous workflows and migrating synchronous processes that depend on large atomic transactions to eventually consistent designs while preserving correctness, clarifying tradeoffs, and improving performance.
  • Working knowledge of authentication and authorization technologies such as OAuth, OIDC, WebAuthn, passkeys, or MFA, including common implementation pitfalls and security risks.
  • A track record of setting technical direction for a team, owning large multi-quarter projects, writing designs for others to build from, and explaining tradeoffs to engineers and leadership.
  • Ability to raise engineers through reviews, design feedback, and mentoring, and to hand off ownership.
  • Availability to participate in the 24/7 on-call rotation for tier-one services.

Responsibilities

  • Help move authentication out of the monolith into an independent service with its own data, migrating endpoint by endpoint and table by table while the service continues handling production traffic.
  • Set technical direction for the authentication migration and new authentication services, including extending trusted access to AI agents.
  • Lead a portion of the authentication service roadmap and work with leadership to ensure planning reflects the full scope of requirements.
  • Own significant designs for the remaining migration, including moving session and device management flows, switching the source of truth one provable iteration at a time, and publishing authentication events for other services to consume.
  • Make and document team technical decisions, weighing reliability and security against delivery.
  • Set team standards for testing, observability, and safe rollout so regressions are identified before customers see them.
  • Build platform components needed by the service and work with sibling teams to propagate distributed-system standards across the organization.
  • Partner with Authorization, Identity Services, and Security teams, and guide product teams integrating with the authentication service.
  • Apply human judgment, careful validation, and small reviewable changes to AI-assisted work on security-critical code.

Desired Qualifications

  • Extensive experience with Go or another backend language such as Java, C#, Rust, C++, or Python.
  • Experience extracting services from a monolith.
  • Experience with MySQL, Redis, Kafka, and DynamoDB at scale.
  • Familiarity with the Secure Remote Password protocol.
  • Experience owning services with strict availability targets, including SLOs, on-call, and incident response.

About the Company

1Password

Builds password and access security tools

1Password builds password management and identity security software for individuals, families, and organizations. Its password manager stores logins, passkeys, and sensitive documents in encrypted vaults, with apps and browser extensions that generate passwords and fill them into websites. Businesses use administrative controls to set access permissions, monitor sign-ins, and automate account provisioning through integrations with their existing identity systems. The company sells subscriptions for personal accounts and teams, while developer tools retrieve credentials for applications without putting secrets directly in source code. Founded in 2005, 1Password is headquartered in Toronto, Ontario.

Company size
1,001-5,000
Company stage
Series C
Total funding
$920M
Headquarters
Toronto, Canada
Founded
2005

Recently Posted Jobs

Explore more opportunities at 1Password

See more jobs