Senior Security Engineer - Identity and Access ManagementWe’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management (IAM) and proven expertise in cloud-native environments, particularly AWS. In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.We work Adaptable First. This role can be performed remotely anywhere within Ontario or British Columbia, Canada. We’d love for you to join us!This position is not for an existing vacancy.Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:Building and evolving our Identity Governance and Administration (IGA) capabilities.Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads.Driving integration of IAM across AWS services, Saa S platforms, and developer/Dev Ops pipelines.Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.The Impact You’ll HaveDevelop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle.Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code.Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), Saa S platforms, and third-party identity tools (e.G., Okta,



Cyber Ark).Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.Mentor junior engineers and serve as a technical lead for IAM-related projects.Collaborate with Security, Dev Ops, and Infrastructure teams to embed IAM controls across the engineering lifecycle.Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.Who You AreA minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a Ph D with 3 years’experience; or equivalent combination of related education and work experience.Strong experience with IAM tools (e.G., Okta, Cyber Ark, Ping, Sail Point).Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.Proficiency in infrastructure-as-code (e.G., Terraform, Cloud Formation).Familiarity with authentication and authorization protocols (SAML, OAuth2, Open ID Connect, Kerberos).Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.Hands-on skills in scripting (e.G., Python, Power Shell) to automate IAM operations.Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.Proven experience integrating IAM into CI/CD pipelines, secrets management,



and Dev Ops workflows.Excellent communication skills and ability to influence and lead cross-functional teams.Nice-To-HavesRelevant certifications such as CISSP, CISM, or IAM-specific credentials (e.G., CIAM/CAMS, Cyber Ark Certified, Okta Certified Consultant).Experience with AWS technologies such as Lambda, S3, Dynamo DB, RDS, Aurora, SNS, SQS, Cloud Trail, Cloud Watch, Code Pipeline, AWS Developer Tools, and IAM roles and permissionsExperience with Dev Ops tools and practices, including secrets management and CICD pipelinesCompensation and BenefitsMarqeta calibrates pay to a competitive value according to working location. When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this full-time position, reflected in CAD, is: 136,800 - 171,000.We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.Along with monetary compensation, Marqeta currently offers:Multiple health insurance optionsFlexible vacation time with additional floating holidaysRetirement savings program with company contributionEquity in a publicly-traded companyMonthly stipend to support our remote work modelAnnual development stipend to support our people growth and developmentFamily-forming benefits and generous parental leave base salary top-upAbout MarqetaMarqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage

📌 Senior Security Engineer - Identity And Access Management Cybersecurity Remote - Ontario Or British (Vancouver)
🏢 Marqeta
📍 Vancouver