Senior Security Engineer - Identity and Access Management

Remote - Ontario OR British Columbiafull time

Apply on Employer Site

Remote

senior

H1B: yes

Marqeta Inc Senior Security Engineer at Marqeta Inc focused on Identity and Access Management (IAM) in cloud-native AWS environments. Design and implement IAM strategies, automation, and integrations to secure access across systems.

Responsibilities

Build and evolve Identity Governance and Administration (IGA) capabilities
Implement and operate Privileged Access Management (PAM) in AWS environment
Design and architect Certificate Lifecycle Management solution for cloud-native workloads
Drive integration of IAM across AWS services, SaaS platforms, and DevOps pipelines
Design identity and access controls to protect AI/ML systems
Develop and lead implementation of IAM strategies aligned with cloud-native architecture
Expand and operationalize IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle
Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code
Promote and enforce least privilege and zero-trust principles
Mentor junior engineers and serve as technical lead for IAM projects
Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls
Stay ahead of emerging trends and refine IAM strategy based on cloud threats and compliance

Qualification

Strong experience with IAM tools (eHands-on skills in scripting (eRelevant certifications such as CISSP

Required

A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint).
Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.
Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation).
Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos).
Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.
Hands-on skills in scripting (e.g., Python, PowerShell) to automate IAM operations.
Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.
Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.
Excellent communication skills and ability to influence and lead cross-functional teams.

Preferred

Relevant certifications such as CISSP, CISM, or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).
Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions
Experience with DevOps tools and practices, including secrets management and CICD pipelines

Benefits

Medical
Equity/RSU
Parental Leave

Company

Marqeta Inc

View company page

Source: ashby

Active within the past hour

Remote-friendly

More roles at Marqeta Inc

Staff Software Engineer - Core Edge Processing

Remote - Ontario OR British Columbia

Senior Security Engineer - Vulnerability & Data/SaaS Security

Remote - Ontario OR British Columbia

GTM Analytics Manager

Remote - Ontario OR British Columbia

SEC Reporting & Technical Accounting Senior Analyst

Remote - USA

Boost Your Interview Chances

Improve Resume Match Score

Free

Your Score

9.0

Strong Applicant

Must-Have Skills for This Role

Identity and Access ManagementAWSOktaCyberArkPingSailPoint

Optimize my Resume

Apply Faster with Autofill

Free

Save your profile once. LumiJobs pre-fills the employer's application form so you stop re-typing the same answers on every site.

Apply With Autofill

Or skip LumiJobs's tools and submit directly on the employer's career site.

Apply on Employer Site

Senior Security Engineer - Identity and Access Management at Marqeta Inc · LumiJobs