Staff Developer, Authentication Enablement

We're looking for a Staff Developer to join our Authentication Enablement team. Our mission is to help people, families and businesses unlock 1Password and access their information safely and simply, with authentication that stays in the background. Every 1Password app establishes its session with our servers through the service this team owns, whether the user signs in with a password and Secret Key, SSO, a passkey, MFA or a trusted device. As a Staff Developer, you'll help move authentication out of the monolith and into an independent service with its own data, so sign-in can scale and stay available independently of the rest of the platform. The service continues to handle production traffic throughout the migration, so we're moving endpoint by endpoint and table by table, with weighted rollouts, consistency checks and tested rollback procedures. You'll help set the technical direction for the migration and for new authentication services, as 1Password extends trusted access to AI agents. How we're using AI today Our Engineering, Product, and Design teams are thoughtfully integrating AI across the full software and product development lifecycle to move faster without sacrificing quality or security. In practice, that looks like engineers using AI-assisted coding tools to accelerate reviews and catch bugs earlier, product managers synthesizing user research at scale, and designers rapidly prototyping and iterating with AI-generated mockups. We approach AI the same way we approach security: with clear principles, human accountability at every consequential decision point, and rigorous evaluation before anything ships to customers. This is a remote opportunity within Canada and the US. What we're looking for: 30 Significant experience building and operating backend services. 30 Deep expertise with distributed systems and data: moving live traffic or data between systems without downtime, event streaming or change data capture, and keeping two sources of truth consistent through a cutover. 30 Strong experience designing asynchronous workflows and migrating synchronous processes that depend on large atomic transactions to eventually consistent designs, while preserving correctness, clarifying tradeoffs, and improving performance. 30 Working knowledge of authentication and authorization technologies such as OAuth, OIDC, WebAuthn, passkeys, or MFA, including common implementation pitfalls and security risks. 30 A track record of setting technical direction for a team: owning large, multi-quarter projects, writing the designs others build from, and explaining tradeoffs to engineers and leadership alike. 30 You raise the engineers around you through reviews, design feedback and mentoring, and you work to hand off ownership rather than holding on. Bonus points for: 30 Extensive experience with Go or another backend language such as Java, C#, Rust, C++, or Python. 30 Experience extracting services from a monolith. 30 Experience with MySQL, Redis, Kafka, and DynamoDB at scale. 30 Familiarity with Secure Remote Password protocol. 30 Owning services with strict availability targets, including SLOs, on-call and incident response. What you can expect: 30 Lead a portion of the authentication service's roadmap for the next 12 months, and work closely with leadership to ensure that planning reflects the full scope of requirements. 30 Own significant designs in the remaining migration: moving session and device management flows, switching source of truth one provable iteration at a time, and publishing authentication events for other services to consume. 30 Make and document the team's technical decisions, weighing reliability and security against delivery. 30 Set the team's standards for testing, observability and safe rollout, so regressions surface before customers see them. 30 Build the platform pieces the service needs when 1Password doesn't have them yet, and work with sibling teams to propagate new distributed system standards across the organization. 30 Partner with the Authorization, Identity Services and Security teams, and guide the product teams whose features depend on authentication as they integrate with the service. 30 Hold AI-assisted work on security-critical code to the same bar as everything else: human judgment, careful validation and small, reviewable changes. 30 Participate in the 24/7 on-call rotation for tier-one services. USA-based roles only: The annual base salary for this role is between $192,000 USD and $278,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. Canada-based roles only: The annual base salary for this role is between $167,000 CAD and $242,000 CAD, plus immediate participation in 1Password's generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs. At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set. This posting is for an existing vacancy. What we offer We believe in working hard, and rewarding that hard work through our benefits. While not an exhaustive list, here is a glance at what we currently offer: Health and wellbeing Maternity and parental leave top-up programs Competitive health benefits Generous PTO policy Growth and future RSU program for most employees Retirement matching program Free 1Password account Community Paid volunteer days Peer-to-peer recognition through Bonusly Remote-first work environment *Some roles in our GTM team are currently being hired for in-person hybrid work in Toronto and Austin. These roles will specify on the posting.