Shape cloud-native identity security at Marqeta with IAM and AWS expertise while working remotely anywhere in Ontario or British Columbia. As a Security Engineer II, you will build, automate, and operate identity security platforms across Marqeta’s cloud-based systems. Your work spans Okta, privileged access management, IGA workflows, AWS IAM, and access automation. You will help reduce standing access and manual work.

Key Responsibilities
- Configure Okta SSO, MFA, lifecycle management, and access policies
- Manage just-in-time privileged access profiles for cloud resources
- Build IGA workflows supporting least privilege and audit readiness
- Automate access processes using scripting, APIs, and infrastructure-as-code




- Support SOC 2 and PCI DSS audit activities

Requirements:
- At least three years of related experience with bachelor’s degree
- Hands-on experience with IAM tools such as Okta or CyberArk
- Working knowledge of SAML, OAuth2/OIDC, and SCIM
- Working knowledge of AWS IAM, least privilege, and RBAC
- Scripting skills using Python or PowerShell for IAM automation Apply identity governance, privileged access management, AWS security, and automation expertise to Marqeta’s cloud workplace.

📌 Identity Access Management Security Engineer (Vancouver)
🏢 Marqeta
📍 Vancouver