Marqeta
Security Engineer II - Identity and Access Management
Remote - Ontario OR British Columbia · Remote · Full-time · Posted Oct 6, 2026
- Experience
- Minimum 3 years related experience with a Bachelor’s degree; or 2 years with a Master’s degree; or an equivalent combination of related education and work experience.
- Education
- Bachelor’s degree; or Master’s degree with the stated experience alternative; or equivalent combination of related education and work experience.
About the job
Build, automate, and operate Marqeta’s cloud-focused identity and access management platforms, including access controls for AI/ML systems.
What you'll do
- Configure and maintain Okta SSO, MFA, lifecycle management, and application integrations; manage just-in-time privileged access.
- Build IGA access request, approval, and review workflows; automate identity lifecycle processes and access reviews.
- Integrate IAM across cloud services, SaaS, and developer pipelines; support audits and collaborate on access issues.
What they ask for
- Hands-on experience with IAM tools.
- Working knowledge of SAML, OAuth2/OIDC, SCIM, AWS IAM, least privilege, and RBAC.
- Scripting skills, such as Python or PowerShell, to automate IAM operations through APIs.
- Familiarity with directory services and compliance frameworks such as NIST, SOC 2, and PCI DSS.
Nice to have
- Relevant IAM certifications or credentials.
- Experience with AWS technologies and DevOps practices, including secrets management and CI/CD pipelines.
Pay
CAD 104,000 - 130,000 (base salary)
Tools
Okta, Entra ID, CyberArk, Ping, SailPoint, SAML, OAuth2/OIDC, SCIM
AI focus
Design identity and access controls to protect AI/ML systems, including secure access to training data, models, and inference APIs.
Model-written summary · the original posting is authoritative