Security Engineer II - Identity and Access Management

We’re seeking an experienced Security Engineer II with a strong passion for Identity and Access Management (IAM) and expertise in cloud-native environments, particularly AWS. You'll build, automate and operate our identity security platforms, help shape modern identity solutions, and reduce standing access and manual work across Marqeta's systems and services, which are 100% cloud-based with no data center footprint.

We work Flexible First https://www.marqeta.com/blog/flexible-first. This role can be performed remotely anywhere within Ontario or British Columbia, Canada. We’d love for you to join us!

Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:

• Building our Identity Governance and Administration (IGA) capabilities.
• Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.
• Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
• Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.

The Impact You’ll Have

• Configure and maintain Okta SSO, MFA, lifecycle management and policies, including SAML/OIDC app integrations and SCIM provisioning.
• Manage just-in-time access profiles and policies in PAM platforms (such as Britive or CyberArk) for cloud and privileged resources, working with engineering teams to reduce standing privileges.
• Build and improve access request, approval and review workflows in IGA platforms (such as Lumos or S