Identity Access Management Security Engineer

Shape cloud-native identity security at Marqeta with IAM and AWS expertise while working remotely anywhere in Ontario or British Columbia.

As a Security Engineer II, you will build, automate, and operate identity security platforms across Marqeta’s cloud-based systems. Your work spans Okta, privileged access management, IGA workflows, AWS IAM, and access automation. You will help reduce standing access and manual work.

Key Responsibilities:

• Configure Okta SSO, MFA, lifecycle management, and access policies
• Manage just-in-time privileged access profiles for cloud resources
• Build IGA workflows supporting least privilege and audit readiness
• Automate access processes using scripting, APIs, and infrastructure-as-code
• Support SOC 2 and PCI DSS audit activities

Requirements:

• At least three years of related experience with bachelor’s degree
• Hands-on experience with IAM tools such as Okta or CyberArk
• Working knowledge of SAML, OAuth2/OIDC, and SCIM
• Working knowledge of AWS IAM, least privilege, and RBAC
• Scripting skills using Python or PowerShell for IAM automation

Apply identity governance, privileged access management, AWS security, and automation expertise to Marqeta’s cloud environment.