Security Engineer II - Identity and Access Management
Marqeta · Remote · Remote - Ontario OR British Columbia ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (Canada)
- AWS + Okta focus
- IAM automation
- Senior level role
- Equity included
You will design and operate identity security solutions for Marqeta’s 100% cloud-based infrastructure. The team aims to create a frictionless IAM program by implementing governance, privileged access management, and automated workflows to protect AI/ML systems and core services.
What you'll do
- Build Identity Governance and Administration capabilities to support least privilege
- Implement Privileged Access Management in AWS-focused cloud environments
- Configure Okta SSO, MFA, and lifecycle policies including SAML/OIDC integrations
- Automate joiner, mover, and leaver processes using scripting and APIs
- Design access controls to secure AI/ML training data and inference APIs
- Support SOC 2 and PCI DSS audits by producing access evidence
- Partner with DevOps teams to troubleshoot access issues and onboard applications
What you'll need
- Minimum 3 years of experience with a Bachelor’s degree or equivalent
- Hands-on experience with IAM tools like Okta, Entra ID, or SailPoint
- Working knowledge of SAML, OAuth2/OIDC, and SCIM protocols
- Understanding of AWS IAM concepts, roles, policies, and federation
- Scripting skills in Python or PowerShell for automating IAM operations
- Familiarity with directory services such as Active Directory or LDAP
- Knowledge of compliance frameworks including NIST, SOC 2, and PCI DSS
Nice to have
- IAM-specific certifications such as CIAM, CAMS, or Okta Certified Consultant
- Experience with AWS services like Lambda, S3, DynamoDB, and CloudTrail
- Familiarity with DevOps practices, secrets management, and CICD pipelines
Stack
- AWS
- Okta
- Python
- PowerShell
- SailPoint
- CyberArk
- Entra ID
How you'll work
- Fully remote within Ontario or British Columbia, Canada
- Flexible First work policy
- On-call rotation may apply
What you get
- Base salary range 104,000 to 130,000 CAD
- Annual performance and company success bonuses
- Multiple health insurance options
- Flexible vacation time with floating holidays
- Retirement savings program with company contribution
- Equity in a publicly-traded company
- Monthly remote work stipend
- Annual development stipend
- Generous parental leave and family-forming benefits