Senior Security Engineer - Cloud Identity
$136.8k - $171k per yearMQ Referrals Only
We’re seeking an experienced Senior Security Engineer with a strong passion for Identity and Access Management(IAM) and proven expertise in cloud-native environments , particularly AWS . In this role, you’ll help shape and implement modern identity strategies to secure access across all of Marqeta’s systems and services—100% cloud-based, with no data center footprint.
Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:
- Building and evolving our Identity Governance and Administration (IGA) capabilities.
- Implementing & Operating Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment.
- Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads.
- Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines.
- Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs.
The Impact You’ll Have
- Develop and lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.
- Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle.
- Automate identity provisioning, de-provisioning, and access reviews using AI tools and infrastructure-as-code.
- Design IAM integrations for AWS-native services (Lambda, EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta, CyberArk).
- Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.
- Mentor junior engineers and serve as a technical lead for IAM-related projects.
- Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle.
- Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.
Who You Are
- A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
- Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint).
- Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.
- Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation).
- Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos).
- Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.
- Hands-on skills in scripting (e.g., Python, PowerShell) to automate IAM operations.
- Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.
- Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.
- Excellent communication skills and ability to influence and lead cross-functional teams.
Nice to have
- Relevant certifications such as CISSP, CISM, or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).
- Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, Code Pipeline, AWS Developer Tools, and IAM roles and permissions
- Experience with DevOps tools and practices, including secrets management and CICD pipelines
Manager
Recruiter for this role
- Kayla Osuna
Compensation and Benefits
Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location.
When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position, reflected in CAD, is: 136,800 - 171,000
We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.
Along with monetary compensation, Marqeta offers
- Multiple health insurance options
- Flexible vacation time
- Retirement savings program with company contribution
- Equity in a publicly-traded company
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Family-forming benefits and up to 20 weeks of Parental Leave
Vacancy posted 4 days ago
Similar jobs that could be interesting for youBased on the Senior Security Engineer - Cloud Identity in Toronto, ON vacancy
- ...inclusive and high-performing culture. We are seeking a Cloud Security Engineer to join our Cloud & Application Security Product and Architecture... ...Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans. Accessibility...SuggestedPermanent employmentFlexible hours
- ...Senior Security Engineer Location : Toronto, On-Site Reports to: Head of Security The Role This is an early, high-ownership security... ...'ll design and operate the security platform end to end — identity, endpoints, detection, automation, and compliance — for a...SeniorFull time
$118k - $135k per year
...Build secure, scalable backend solutions that protect the world's leading financial institutions... ...Role Capco is seeking a Security Engineering Developer to design, develop, and enhance... ...role will focus on integrating modern Identity and Access Management (IAM) solutions...SeniorInternshipImmediate start- ...It all started when engineer Fred Luddy wrote code that automated... ...Description The ServiceNow Security Organization (SSO) The ServiceNow... ...data and workloads to the cloud, accelerating our business so... ..., age, disability, gender identity, veteran status, or any other...SeniorFull timeContract workWork at officeImmediate startRemote workFlexible hours
$136k - $187k per year
...Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral... ...s Identity Governance (OIG) organization is looking for a Senior Engineer to join our team — a team that is directly responsible for...SeniorLocal areaWorldwide$122.74k - $141.95k per year
...HelloFresh a trusted name - someone with a passion for security and appetite for new challenges. Security Engineers work in a variety of ways to constantly iterate and... ...provides umbrella coverage to Pentest, Red Teaming, Cloud Assessment, Source Code Review, use of vulnerable...SeniorWork at officeRemote workWork from homeFlexible hours2 days per week3 days per week$82k - $135k per year
...individuals, families and communities around the world. : The Senior Security Platform Engineer is responsible for effectively planning, designing,... ...platforms and tools: Perimeter, Endpoints, Crypto, Cloud, Email Security, and Security Visibility: Email and Anti...SeniorFull timeWork at officeRemote workWork from homeFlexible hours$159.1k - $198k per year
...Summary League is seeking a Software Security Engineer to join our Security Engineering org and... ...complex security challenges in a modern cloud-native environment. As League... ...application security, secrets management, identity management, and secure software delivery...SeniorFull timeWork at officeRemote workFlexible hours- ...the production account: baseline service-control policies (data residency, root denial, multi-factor authentication, public-S3 denial, security-service denial), customer-managed KMS keys, least-privilege IAM roles, CloudWatch alarms and log shipping, S3 with seven-year Object...SeniorContract workInternship
$80 - $90 per hour
Role: Senior Cloud Engineer Rates: $80-90.00 p/h INC. Structure: 6 month Contract, Hybrid... ...Operations, DevOps or Cloud Engineering Operations role ⢠At least 6+ years... ...Knowledge of software design patterns, and/or security considerations - Focus on scalable, enterprise...SeniorContract workManual labor- ...AWS Cloud Engineer – AWS Networking, Infrastructure & Security Toronto, ON – 3 Days WFO Experience: • 6–8 years Essential Skills: • More than 5 years of hands-on AWS experience in production environments. • Strong knowledge of AWS Networking...Contract work
$116k - $145k per year
...As Marqeta’s Senior Cloud Database Engineer, you will join our Cloud Database Engineering team wherein you will be responsible for all databases... ...immigration status, physical or mental disability, gender identity, gender expression, sexual orientation, genetic information...SeniorLong term contractTemporary workWork at officeRemote workFlexible hours- ...Essential Skills: • More than 6 years of security engineering experience with 3+ years in cloud: • Azure • AWS • OCI Hands-on experience with: • Microsoft Defender for Cloud • Sentinel • Defender for Endpoint • Strong knowledge of cloud...Contract work
$90.37 - $108.45 per hour
...RQ11264 - DevOPS/Cloud Engineer - Senior 11 months Contract (235 business days) ONSITE 5 days - 87 Sir William Hearst Avenue Must Have: · 10+ years of experience in systems, data communications and telecommunication technology including experience with RedHat...SeniorContract work$85k - $156k per year
...job coaching Deloitte Global is the engine of the Deloitte network. Our professionals... ...Role Overview We are seeking a Cloud Security Solutions Manager who can translate cloud... ...security tooling (e.g., CNAPP, CSPM, CIEM) Identity and access risk reduction initiatives...Permanent employmentRemote workFlexible hours$110k - $120k per year
...celebrate your contributions. The Job: Cloud Engineer What You’ll Do As a member of the... ...a key role in designing, deploying, securing, and optimizing cloud infrastructure and... ...If you’re passionate about securing identities, improving access controls, and building...Temporary workWork at officeRemote work- ...Job Title: Senior Azure Platform and Cloud Infrastructure Engineer Location: Toronto, ON Hybrid: 2 Days a Week in Office Primary Skills... ...Guardrails: Azure Policy RBAC Entra ID Azure Security Monitoring and Operations: Building custom...SeniorPermanent employmentWork at office2 days per week
$142k - $160k per year
...celebrate your contributions. The Job: Cyber Security Engineer What You’ll Do Reporting to the Senior Manager, Cyber Operations , the Cyber Security Engineer... ..., and reporting. Partner with infrastructure, cloud, application, and business teams to drive timely...SeniorTemporary workWork at officeRemote work- ...impact with MNP Digital, within Digital Solutions as a Senior Cloud Architect . As a Senior Cloud Architect at MNP Digital,... ...not limited to networking, compute, storage, information security, risk, enterprise identity and access management, and security operations. Own...SeniorFull timeRemote workFlexible hours
- ...Description: Solution Architect - (Security & API Infrastructure)... ...security, API management, and cloud infrastructure Toronto,... ...Architect fraud detection and identity verification solutions leveraging... ...with enterprise architects, engineering leads, product owners, and...Contract work
$135k per year
...Position: Senior, Cloud Engineering - Policy-as-Code Location: Hybrid, 2-3x per week in office (Toronto, Downtown) Structure : FTE, Permanent... ...modules from scratch ~ Strong understanding of cloud security frameworks: NIST, CIS Benchmarks, PCI, etc. ~ GCP and/or...SeniorPermanent employmentContract workWork at office$180k - $220k per year
...Position: Â Global Head of Customer Identity & Access Management, IAM / Enterprise Security Location:Â Hybrid, 2x per... ...Bachelorâs degree in Computer Science, Engineering, Information Systems, or a... ...industry certifications (e.g., cloud, security, IAM) is an asset...Permanent employmentFull timeWork at office- ...a great opportunity for you! Our client is looking for a Senior DevOPS/Cloud Engineer for a 12 month contract in Toronto. This is an onsite role... ...cloud solutions • Proven experience designing scalable, secure, and highly available cloud architectures • Hands-on...SeniorContract work
$121k - $170k per year
...As a Lead, Information Security reporting to Senior Director, Information Security, you'll serve as the... ...for information security across a major cloud-based technology project. You'll play... ...from candidates of all backgrounds and identities. We are committed to fostering an inclusive...SeniorLong term contractFull timeTemporary workWork at office3 days per week- ...Job Responsibility: Cloud Engineer At Cognizant, our global community sets us apartan energetic, collaborative and inclusive workplace... ...appropriate monitoring to ensure the products' responsiveness, security, resilience, and efficiency. ~ Provide ongoing support...Full timeRemote work
$156.8k - $196k per year
...As Marqeta's Manager, Software Engineering within our Risk, Fraud and Disputes pod, you will... ...design, development, and execution of our Identity Platform . You will be responsible for building... ...years in engineering, 3+ years managing senior and staff engineers). Deep backend...SeniorInternshipWork at officeRemote workFlexible hours$173k - $237.6k per year
...Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral... ...primary liaison between business units, development, and engineering teams. Lead planning activities, author comprehensive PRDs/user...Local areaWorldwideShift work$90k - $175k per year
...helps organizations build resilient identity and access management programs that... ...stakeholders, and help clients modernize and secure privileged access across cloud and on-premises environments. You... ...'s degree in Computer Science, Engineering, Information Security, or related...Permanent employmentFlexible hours- ...runs on — and we’re not done yet. As Senior Manager, SW Managed Cloud, you won’t just manage software: you... ...the discipline to run a rigorous engineering organization and the creative instinct... ...recruiting sharp talent, forging the team’s identity, and driving outcomes that matter to...SeniorFull timeWork at office3 days per week
$35.01k - $125.51k per year
...Job Responsibility: Security Engineer - Contractor Pyrethra ( is a Technology Advisory and Consulting Corporation based in Niagara Falls,... ...including but not limited to system engineers, system administrators, cloud engineers, software developers, business development, tender/...For contractorsFixed term contract
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior Security Engineer - Cloud Identity. Be the first to apply!
Related searches
- security engineer remote Toronto, ON
- security system engineer Toronto, ON
- physical security engineer Toronto, ON
- aws security engineer Toronto, ON
- security engineering manager Toronto, ON
- product security engineer Toronto, ON
- google cloud architect Toronto, ON
- cloud engineer remote Toronto, ON
- cloud network engineer Toronto, ON
- cloud infrastructure architect Toronto, ON