Back to jobs

Staff Security Engineer - Identity

Toronto, Canada; Vancouver, Canada

We’re seeking an experienced Staff Security Engineer with a strong passion for Identity and Access Management(IAM) and proven expertise in cloud-native environments, particularly AWS. In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.

 

Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:

  • Building and evolving our Identity Governance and Administration (IGA) capabilities.
  • Implementing Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.
  • Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads.
  • Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
  • Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.

 

The Impact You’ll Have:

  • Develop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.
  • Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle.
  • Automate identity provisioning, de-provisioning, and access reviews using tools and infrastructure-as-code.
  • Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta, CyberArk).
  • Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.
  • Mentor junior engineers and serve as a technical lead for IAM-related projects.
  • Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle.
  • Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.

Who You Are:

  • A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
  • Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint).
  • Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.
  • Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation).
  • Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos).
  • Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.
  • Hands-on skills in scripting (e.g., Python, PowerShell) to automate IAM operations.
  • Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.
  • Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.
  • Excellent communication skills and ability to influence and lead cross-functional teams.

Nice to have

  • Relevant certifications such as CISSP, CISM, or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).
  • Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions
  • Experience with DevOps tools and practices, including secrets management and CICD pipelines

Manager

  • Chetan Jha

Recruiter for this role

  • Kayla Osuna

Compensation and Benefits

Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. 

When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position, reflected in CAD,  is: 141,900 - 177,400.

We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.

Along with monetary compensation, Marqeta offers

  • Multiple health insurance options
  • Flexible time off – take what you need
  • Retirement savings program with company contribution
  • Equity in a publicly-traded company 
  • Monthly stipend to support our remote work model
  • Annual “development dollars” to support our people growth and development
  • Family-forming benefits and up to 20 weeks of Parental Leave

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...

MQ - EEOC Voluntary Questions

At Marqeta, we strive to live our value of “Everyone Belongs,” where we seek various opinions and experiences as we build opportunities around equity, inclusion, and belonging. We ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. As set forth in Marqeta’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Any information that you do provide will be anonymized and reviewed, strictly in aggregate, to find ways to improve our recruiting processes. To learn more about our job applicant privacy policy, please visit our website.

We’re also providing additional information and resources as you complete the form:

  • Race & Ethnicity Definitions
  • Veteran Status: If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. 
    • A "disabled veteran"
    • A "recently separated veteran" 
    • An "active duty wartime or campaign badge veteran" 
    • An "Armed forces service medal veteran"
  • Disability Status: You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition.

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Select...
Select...
Select...
Select...
Select...
Select...
Select...