Security Engineer II – Identity and Access Management

Job not on LinkedIn

🔥 7 minutes ago

🇨🇦 Canada – Remote

💵 $104k - $130k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Marqeta

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2010

💼 Consulting

📦 Logistics

💳 Fintech

💰 Post-IPO Equity on 2021-06

Consulting • Logistics • Fintech

Marqeta is a leading modern card issuing platform that empowers businesses to integrate comprehensive credit and payment solutions seamlessly into their processes. Specializing in debit, credit, prepaid, and virtual cards, Marqeta provides dynamic spend controls, Just-in-Time (JIT) funding, and ensures compliance and risk management. The platform supports digital wallets, tokenization, and embedded finance, catering to industries such as digital banking, expense management, and on-demand services. With its open APIs, Marqeta facilitates the creation and management of card products, offering scalability and flexibility for enterprises ranging from startups to global companies.

📋 Description

• Build Identity Governance and Administration capabilities • Implement and operate Privileged Access Management in an AWS-focused cloud environment • Integrate IAM across AWS services, SaaS platforms, and developer/DevOps pipelines • Design identity and access controls for AI/ML systems, training data, models, and inference APIs • Configure and maintain Okta SSO, MFA, lifecycle management, policies, SAML/OIDC integrations, and SCIM provisioning • Manage just-in-time access profiles and PAM policies using platforms such as Britive or CyberArk • Build and improve access request, approval, and review workflows in IGA platforms such as Lumos or SailPoint • Automate joiner, mover, and leaver processes and access reviews using scripting, APIs, and infrastructure-as-code • Partner with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts and troubleshoot access issues • Support SOC 2, PCI DSS, and other audits by producing access evidence and improving control design • Document processes, contribute to runbooks, and participate in on-call rotation if applicable

🎯 Requirements

• Minimum 3 years of related experience with a Bachelor’s degree; or 2 years with a Master’s degree; or equivalent combination of related education and work experience • Hands-on experience with IAM tools such as Okta, Entra ID, CyberArk, Ping, and SailPoint • Working knowledge of SAML, OAuth2/OIDC, and SCIM • Working knowledge of AWS IAM concepts, including roles, policies, and federation • Understanding of least privilege and RBAC • Hands-on scripting skills such as Python or PowerShell for automating IAM operations through APIs • Familiarity with Active Directory, LDAP, and cloud-based directory alternatives • Familiarity with NIST, SOC 2, and PCI DSS compliance frameworks • Clear communication and collaboration with technical and non-technical stakeholders

🏖️ Benefits

• Multiple health insurance options • Flexible vacation time with additional floating holidays • Retirement savings program with company contribution • Equity in a publicly-traded company • Monthly stipend to support the remote work model • Annual development stipend • Family-forming benefits • Generous parental leave base salary top-up • Annual bonuses for eligible employees

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume