Search Remote Jobs

Security Engineer II – Identity and Access Management

🔥 2 minutes ago

🇨🇦 Canada – Remote

💵 $104k - $130k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Marqeta's careers page, not through a job board

First seen by Remote Rocketship 2 minutes ago

Logo of Marqeta

Marqeta

501 - 1000 employees

Founded 2010

💼 Consulting

📦 Logistics

💳 Fintech

💰 Post-IPO Equity on 2021-06

Consulting • Logistics • Fintech

Marqeta is a leading modern card issuing platform that empowers businesses to integrate comprehensive credit and payment solutions seamlessly into their processes. Specializing in debit, credit, prepaid, and virtual cards, Marqeta provides dynamic spend controls, Just-in-Time (JIT) funding, and ensures compliance and risk management. The platform supports digital wallets, tokenization, and embedded finance, catering to industries such as digital banking, expense management, and on-demand services. With its open APIs, Marqeta facilitates the creation and management of card products, offering scalability and flexibility for enterprises ranging from startups to global companies.

📋 Description

• Build, automate, and operate identity security platforms • Shape modern identity solutions and reduce standing access and manual work across Marqeta’s cloud-based systems and services • Build Identity Governance and Administration capabilities • Implement and operate Privileged Access Management in an AWS-focused cloud-first environment • Drive IAM integration across AWS services, SaaS platforms, and developer/DevOps pipelines • Design identity and access controls for AI/ML training data, models, and inference APIs • Configure and maintain Okta SSO, MFA, lifecycle management, policies, SAML/OIDC app integrations, and SCIM provisioning • Manage just-in-time access profiles and policies in PAM platforms such as Britive or CyberArk • Build and improve access request, approval, and review workflows in IGA platforms such as Lumos or SailPoint • Automate joiner, mover, and leaver processes and access reviews using scripting, APIs, and infrastructure-as-code • Partner with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts and troubleshoot access issues • Support SOC 2, PCI DSS, and other audits by producing access evidence and improving control design • Document processes, contribute to team runbooks, and participate in on-call rotation if applicable

🎯 Requirements

• Minimum 3 years related experience with a Bachelor’s degree; or 2 years and a Master’s degree; or equivalent combination of related education and work experience • Hands-on experience with IAM tools such as Okta, Entra ID, CyberArk, Ping, and SailPoint • Working knowledge of SAML, OAuth2/OIDC, and SCIM • Working knowledge of AWS IAM concepts, including roles, policies, and federation • Understanding of least privilege and RBAC • Hands-on scripting skills such as Python or PowerShell to automate IAM operations through APIs • Familiarity with Active Directory, LDAP, and cloud-based directory alternatives • Familiarity with NIST, SOC 2, and PCI DSS compliance frameworks • Relevant certifications or IAM-specific credentials are nice-to-haves, including CIAM/CAMS, CyberArk Certified, and Okta Certified Consultant • Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, CodePipeline, AWS Developer Tools, and IAM roles and permissions is a nice-to-have • Experience with DevOps tools and practices, including secrets management and CI/CD pipelines, is a nice-to-have • Clear communication skills and ability to collaborate with engineers and non-technical stakeholders

🏖️ Benefits

• Multiple health insurance options • Flexible vacation time with additional floating holidays • Retirement savings program with company contribution • Equity in a publicly-traded company • Monthly stipend to support the remote work model • Annual development stipend to support people growth and development • Family-forming benefits • Generous parental leave base salary top-up • Annual bonuses for eligible employees

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 October 30

Levio

1001 - 5000

🏥 Healthcare

🛡️ Insurance

📦 Logistics

AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large-scale technology projects for clients.

🕒 October 30

Fireflies.ai

51 - 200

💼 Consulting

📣 Marketing

📦 Logistics

Security Engineer protecting Fireflies.ai’s AI meeting platform, infrastructure, and user data. Automating controls, triaging vulnerabilities, and securing cloud and backend systems.

🕒 October 27

Affirm

1001 - 5000

💳 Fintech

👥 B2C

🛍️ eCommerce

Product Security Engineer building IAM operations, SailPoint integrations, and backend identity services. Automating secure access workflows for Affirm’s pay-over-time platform.

🇨🇦 Canada – Remote

💵 $133k - $183k / year

💰 Post-IPO Equity on 2021-01

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

🕒 October 27

Affirm

1001 - 5000

💳 Fintech

👥 B2C

🛍️ eCommerce

Product Security Engineer building secure CIAM authentication services for Affirm’s pay-over-time platform. Developing Python/Kotlin APIs, MFA, identity integrations, and reliable account-access experiences.

🇨🇦 Canada – Remote

💵 $133k - $183k / year

💰 Post-IPO Equity on 2021-01

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🕒 October 21

Abnormal Security

501 - 1000

🔒 Cybersecurity

AI Security Sales Executive selling Abnormal’s AI security suite to enterprise customers in Canada. Owning quota, new-logo hunting, upsells, and technical security sales cycles.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok