Senior Security Engineer
- Identity and Access Management We’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management (IAM) AWS . In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint. We work Flexible First. This role can be performed remotely anywhere within Ontario or British Columbia, Canada. Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in: Building and evolving our Identity Governance and Administration (IGA) capabilities. Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) workplace. Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads. Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines. Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs. Develop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles. Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle. Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code. Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation. Mentor junior engineers and serve as a technical lead for IAM-related projects. Collaborate with Security, DevOps,



and Infrastructure teams to embed IAM controls across the engineering lifecycle. A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience. Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation. Python, PowerShell) to automate IAM operations. Solid understanding of compliance standards: Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows. CIAM/CAMS, CyberArk Certified, Okta Certified Consultant). Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions Experience with DevOps tools and practices, including secrets management and CICD pipelines The new-hire base salary range for this full time position, reflected in CAD, is: 136,800
- 171,000. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.



Multiple health insurance options Flexible vacation time with additional floating holidays Retirement savings program with company contribution Equity in a publicly-traded company Monthly stipend to support our remote work model Family-forming benefits and generous parental leave base salary top-up Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that. Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We approach challenges with curiosity and take smart risks. We do not discriminate based on race, color, religion, sex (including pregnancy, lactation, childbirth, or related medical conditions), veteran status or uniformed service member status, age, national origin or ancestry, citizenship or immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information (including testing or characteristics) or any other characteristic protected by applicable law. We also consider qualified applicants with criminal histories, consistent with legal requirements. Marqeta endeavors to make reasonable accommodations for applicants with disabilities. If you are an individual with a disability and require a reasonable accommodation to submit this application, complete any pre-employment testing, or otherwise participate in the employee selection process, please submit this form with your specific accommodation request. Personal data that is provided as part of the application and recruitment process is processed in accordance with the Applicant

📌 Senior Security Engineer (Canada)
🏢 Marqeta
📍 Canada