104K–130K CAD / year
Security Engineer II - Identity and Access Management
DevOpsRemote — Ontario, British Columbia, Canada
Published on 2026-11-09
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and operate cloud-native identity security capabilities, with a focus on AWS. The role covers identity governance, privileged access, and integrations across cloud services, SaaS applications, and developer pipelines.
About the company
Marqeta provides modern card issuing and payment infrastructure for fintechs and brands. It enables companies to create, control, and authorize card programs programmatically.
The team
CyberSecurity
Stack
AWSOktaEntra IDCyberArkPingSailPointBritiveLumos
What you'll do
- Configure and maintain Okta SSO, MFA, lifecycle management, and SAML/OIDC integrations with SCIM provisioning.
- Manage just-in-time access policies in PAM platforms and help reduce standing privileges.
- Build access request, approval, and review workflows in IGA platforms.
- Automate joiner, mover, and leaver processes and access reviews using scripts, APIs, and infrastructure as code.
- Partner with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts and troubleshoot access.
- Support SOC 2, PCI DSS, and other audits by providing access evidence and improving controls.
- Design identity and access controls for AI/ML systems.
- Document processes and contribute to team runbooks.
What we're looking for
- At least 3 years of related experience with a bachelor's degree, 2 years with a master's degree, or equivalent experience.
- Hands-on experience with IAM tools such as Okta, Entra ID, CyberArk, Ping, or SailPoint.
- Working knowledge of SAML, OAuth2/OIDC, and SCIM.
- Working knowledge of AWS IAM roles, policies, and federation, along with least privilege and RBAC.
- Scripting experience with Python or PowerShell and APIs.
- Familiarity with Active Directory, LDAP, and cloud-based directory services.
- Familiarity with NIST, SOC 2, and PCI DSS.
- Clear communication and collaboration skills.
Nice to have
- IAM or vendor certifications such as CIAM/CAMS, CyberArk Certified, or Okta Certified Consultant.
- Experience with AWS services and developer tools.
- Experience with DevOps practices, secrets management, and CI/CD pipelines.
Benefits
- Annual bonus for eligible employees.
- Flexible vacation and additional floating holidays.
- Retirement savings program with company contribution.
- Equity in a publicly traded company.
- Monthly remote-work stipend and annual development stipend.
- Family-forming benefits and parental-leave salary top-up.