Security Engineer II - Identity and Access Management

Remote - Ontario OR British Columbiafull time

Apply on Employer Site

Remote

mid

H1B: yes

Marqeta Inc The Security Engineer II at Marqeta Inc focuses on Identity and Access Management (IAM) in cloud-native AWS environments. Responsibilities include building and automating identity security platforms and integrating IAM across services to enhance security and compliance.

Responsibilities

Build Identity Governance and Administration (IGA) capabilities
Implement and operate Privileged Access Management (PAM) in AWS environment
Integrate IAM across AWS services, SaaS platforms, and DevOps pipelines
Design identity and access controls for AI/ML systems
Configure and maintain Okta SSO, MFA, lifecycle management, and policies
Manage just-in-time access profiles and policies in PAM platforms
Build and improve access request, approval, and review workflows in IGA platforms
Automate joiner, mover, leaver processes and access reviews
Partner with Security, DevOps, and Infrastructure teams for onboarding and troubleshooting
Support SOC 2, PCI DSS, and other audit activities
Document processes and contribute to team runbooks

Qualification

Hands-on experience with IAM tools (eWorking knowledge of SAMLHands-on scripting skills (e

Required

A minimum of 3 years related experience with a Bachelor’s degree; or 2 years and a Master’s degree; or equivalent combination of related education and work experience.
Hands-on experience with IAM tools (e.g., Okta, Entra ID, CyberArk, Ping, SailPoint).
Working knowledge of SAML, OAuth2/OIDC and SCIM.
Working knowledge of AWS IAM concepts (roles, policies, federation), plus an understanding of least privilege and RBAC.
Hands-on scripting skills (e.g., Python, PowerShell) to automate IAM operations through APIs.
Familiarity with directory services such as Active Directory, LDAP, and cloud-based alternatives.
Familiarity with compliance frameworks such as NIST, SOC 2 and PCI DSS.
Clear communication skills and the ability to collaborate with engineers and non-technical stakeholders.

Preferred

Relevant certifications or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).
Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions
Experience with DevOps tools and practices, including secrets management and CICD pipelines

Benefits

Medical
Equity/RSU
Parental Leave

Company

Marqeta Inc

View company page

Source: ashby

Active within the past hour

Remote-friendly

More roles at Marqeta Inc

Staff Software Engineer - Core Edge Processing

Remote - Ontario OR British Columbia

Senior Security Engineer - Vulnerability & Data/SaaS Security

Remote - Ontario OR British Columbia

GTM Analytics Manager

Remote - Ontario OR British Columbia

SEC Reporting & Technical Accounting Senior Analyst

Remote - USA