Career EngineCareer Engine
Your matchExample
79%match
Why you fitThis role calls for AWS and Identity And Access Management — tell us what you know and we'll check the rest.
Gap to noteAlso lists Iam — worth confirming before you apply.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Job Opening

marqeta logo

Senior Security Engineer - Cloud Identity

marqeta · Toronto, Ontario · Posted 108 days ago

hybridic
AWSIdentity and Access ManagementIAMOktaCyberArkPrivileged Access ManagementIdentity Governance and AdministrationAWS IAM

We’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management(IAM) and proven expertise in cloud-native environments , particularly AWS . In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.

Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:

  • Building and evolving our Identity Governance and Administration (IGA) capabilities.
  • Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.
  • Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads.
  • Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
  • Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.

The Impact You’ll Have

  • Develop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.
  • Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle.
  • Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code.
  • Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta, CyberArk).
  • Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.
  • Mentor junior engineers and serve as a technical lead for IAM-related projects.
  • Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle.
  • Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.

Who You Are

…

Apply on marqeta's site →

This posting is sourced from marqeta's own career site — applying takes you there directly.

Get roles like this, scored and matched, in your inbox.

Sign up free →

Related roles

This role is one of 945 Security Engineer openings and centers on AWS, Identity And Access Management, Iam, and Okta. There are 40 open roles at marqeta right now.

Want roles like this found for you?

Set your Focus once. Career Engine screens every new opening every week.

A scored, explained shortlist — not a keyword match — delivered weekly. Free for one profile.

Senior Security Engineer - Cloud Identity at marqeta — Toronto, Ontario — Career Engine