Identity Access Management Security Engineer

Shape cloud-native identity security at Marqeta with IAM and AWS expertise while working remotely anywhere in Ontario or British Columbia.
As a Security Engineer II, you will build, automate, and operate identity security platforms across Marqeta’s cloud-based systems. Your work spans Okta, privileged access management, IGA workflows, AWS IAM, and access automation. You will help reduce standing access and manual work.

Key Responsibilities:

Configure Okta SSO, MFA, lifecycle management, and access policies
Manage just-in-time privileged access profiles for cloud resources
Build IGA workflows supporting least privilege and audit readiness
Automate access processes using scripting, APIs, and infrastructure-as-code
Support SOC 2 and PCI DSS audit activities
Requirements:
At least three years of related experience with bachelor’s degree
Hands-on experience with IAM tools such as Okta or Cyber Ark
Working knowledge of SAML, OAuth2/OIDC, and SCIM
Working knowledge of AWS IAM, least privilege, and RBAC
Scripting skills using Python or Power Shell for IAM automation
Apply identity governance, privileged access management, AWS security, and automation expertise to Marqeta’s cloud environment.