Senior Platform Engineer (Network and Edge Services)

About the role

The Network & Edge Services (NES) team at 1Password is responsible for the networking infrastructure that powers the company. This includes DNS resolution, CDN edge protection, ingress, service mesh, and wide-area connectivity. As a Senior Platform Engineer, you will design and deliver network infrastructure, build tooling for other engineering teams, and ensure the network is secure and resilient.

Responsibilities

• Design and deliver network infrastructure across DNS, edge, ingress, and service mesh
• Build tooling and abstractions for provisioning and managing networking needs
• Work closely with cross-functional partners to align on priorities and progress
• Contribute to a culture of shared ownership, direct feedback, and continuous improvement
• Deliver network stack projects end-to-end (service mesh, DNS, ingress/egress, CDN, edge protection, L4/L7 policy)
• Shape technical vision, execute delivery, and maintain operability
• Integrate networking into self-service platforms, streamlining workflows and enabling independent operation
• Participate in the on-call rotation, driving incident resolution and continuous improvement through postmortem analysis
• Collaborate with cross-functional partners in security, platform, and product engineering
• Translate their needs into well-defined work and keep them informed about priorities, progress, and risks
• Foster a collaborative team culture by conducting design reviews, sharing knowledge, and mentoring

Requirements

• 5+ years of hands-on experience with cloud networking and distributed systems at SaaS or similar scale
• Deep knowledge of internet architecture and modern web services (DNS, CDN, WAF, Load Balancing, Ingress, Service Mesh)
• Proficiency in Go (or similar languages) and Infrastructure as Code (Terraform)
• Experience building reliable, observable platforms, defining SLIs/SLOs, and establishing these practices as team standards
• On-call experience, including incident resolution and driving architectural improvements through postmortems and technical decision-making
• Consistently apply a security-first approach, implementing least-privilege policies, ensuring encryption in transit, and evaluating attack surfaces as part of standard design practices

Qualifications

• Experience designing self-service network abstractions (DNS provisioning, ingress configuration, network policy tooling) that empower internal teams
• Experience with CDN, edge protection (cache strategy, WAF, origin shielding), VPNs, and wide-area connectivity in cloud environments
• Familiarity with tools like Envoy, Linkerd, Cloudfront, or Cloudflare
• Open source contributions and experience applying compliance frameworks (SOC 2, ISO 27001) to networking and policy as code

Skills

• Hands-on experience with cloud networking and distributed systems
• Strong understanding of internet architecture and modern web services
• Proficiency in Go (or similar languages) and Infrastructure as Code
• Experience building reliable, observable platforms
• On-call experience and incident resolution skills
• Security-first approach and implementation of least-privilege policies
• Experience with CDN, edge protection, and wide-area connectivity
• Familiarity with networking tools and compliance frameworks

Benefits

At 1Password, we offer:

• Competitive health benefits
• Generous PTO policy
• RSU program for most employees
• RSA matching program
• Peer-to-peer recognition through Bonusly
• Remote-first work environment

Pay

The annual base salary for this role is between $150,000 USD and $210,000 USD for USA-based roles, and between $132,000 CAD and $185,000 CAD for Canada-based roles.

Schedule

This is a remote opportunity within Canada and the US.