Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Marqeta

Security Engineer II – Identity and Access Management

Marqeta

. Build, automate, and operate identity security platforms .

Posted 11/9/2026full-timeRemote • CanadaJuniorMid-Level💰 CA$104,000 - CA$130,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and operating identity security platforms, with a strong focus on IAM tools such as Okta and CyberArk. Proficient in automating IAM operations using scripting languages and integrating identity solutions across cloud environments, particularly AWS.

Highest-signal resume keywords
Identity Governance And AdministrationPrivileged Access ManagementIAM Tools ExperienceAWS IAM ConceptsScripting Skills

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Identity Governance And AdministrationPrivileged Access ManagementIAM ToolsScriptingAWS IAM ConceptsSAMLOAuth2/OIDCSCIMLeast PrivilegeRBAC
Soft Skills
Clear CommunicationCollaboration
Tools & Technologies
OktaCyberArkSailPointAWSActive DirectoryLDAPDevOps ToolsCI/CD PipelinesInfrastructure-As-CodeAPIs
Certifications & Qualifications
CIAM/CAMSCyberArk CertifiedOkta Certified Consultant
Industry Keywords
SOC 2PCI DSSNISTCloud-Based SystemsAccess ControlsIdentity SecurityAutomationAccess ReviewsCompliance FrameworksCloud Accounts

Tech Stack

Tools & technologies
AWSCloudDynamoDBPython

About the role

Key responsibilities & impact
  • Build, automate, and operate identity security platforms
  • Shape modern identity solutions and reduce standing access and manual work across Marqeta’s cloud-based systems and services
  • Build Identity Governance and Administration capabilities
  • Implement and operate Privileged Access Management in an AWS-focused cloud-first environment
  • Drive IAM integration across AWS services, SaaS platforms, and developer/DevOps pipelines
  • Design identity and access controls for AI/ML training data, models, and inference APIs
  • Configure and maintain Okta SSO, MFA, lifecycle management, policies, SAML/OIDC app integrations, and SCIM provisioning
  • Manage just-in-time access profiles and policies in PAM platforms such as Britive or CyberArk
  • Build and improve access request, approval, and review workflows in IGA platforms such as Lumos or SailPoint
  • Automate joiner, mover, and leaver processes and access reviews using scripting, APIs, and infrastructure-as-code
  • Partner with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts and troubleshoot access issues
  • Support SOC 2, PCI DSS, and other audits by producing access evidence and improving control design
  • Document processes, contribute to team runbooks, and participate in on-call rotation if applicable

Requirements

What you’ll need
  • Minimum 3 years related experience with a Bachelor’s degree; or 2 years and a Master’s degree; or equivalent combination of related education and work experience
  • Hands-on experience with IAM tools such as Okta, Entra ID, CyberArk, Ping, and SailPoint
  • Working knowledge of SAML, OAuth2/OIDC, and SCIM
  • Working knowledge of AWS IAM concepts, including roles, policies, and federation
  • Understanding of least privilege and RBAC
  • Hands-on scripting skills such as Python or PowerShell to automate IAM operations through APIs
  • Familiarity with Active Directory, LDAP, and cloud-based directory alternatives
  • Familiarity with NIST, SOC 2, and PCI DSS compliance frameworks
  • Relevant certifications or IAM-specific credentials are nice-to-haves, including CIAM/CAMS, CyberArk Certified, and Okta Certified Consultant
  • Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, CodePipeline, AWS Developer Tools, and IAM roles and permissions is a nice-to-have
  • Experience with DevOps tools and practices, including secrets management and CI/CD pipelines, is a nice-to-have
  • Clear communication skills and ability to collaborate with engineers and non-technical stakeholders

Benefits

Comp & perks
  • Multiple health insurance options
  • Flexible vacation time with additional floating holidays
  • Retirement savings program with company contribution
  • Equity in a publicly-traded company
  • Monthly stipend to support the remote work model
  • Annual development stipend to support people growth and development
  • Family-forming benefits
  • Generous parental leave base salary top-up
  • Annual bonuses for eligible employees