Lead Security Infrastructure Engineer- IAM
Marqeta powers innovative payment solutions for many of the apps and services you enjoy daily. Our open API provides unprecedented flexibility and control for industry-leading companies such as Uber, Coinbase, J.P.Morgan, and Block, to manage payment operations in real-time.
Our team is a mix of industry experts and technology innovators who take a dynamic approach to solving challenging problems. Marqeta was named a 2022 Glassdoor Best Place to Work, highlighting our company culture and collaborative work environment. We are building a global team as diverse as the markets we serve and we’d love it if you joined us on our mission to change the way money moves.
We’re a remote-first company. You have the choice to work from wherever you’re happiest and most productive, whether that’s from home, a co-working space, or one of our four global offices, depending on your location. It’s uncommon for candidates to match all job requirements, but if you’re not far off, we want to hear from you.
Position Summary
IAM is core to a functioning business and a foundational base on which modern, progressive, technology-focused enterprises are built. As part of the IAM Team, you'll report through Security to drive many of the automation, integrations, and technical strategies that impact how Engineers securely access workloads.
We are looking for an individual who, when given the opportunity, tends to lean more towards an IAM focus within their career path.
You will be someone looking for greenfield opportunities within AWS IAM and a level of empowerment and support from leadership to enact meaningful change.
Documentation and communication skills are critical, especially in a remote workforce. You will have a firm understanding and comfort with diagraming concepts and organizing your work product and code in Confluence or GitHub.
Our Identity Access Management team is working on overall Enterprise and Customer Access Management Strategies and Policies, Access Ops, and Access Consulting. Our new areas to conquer will be AWS SSO, Self Serve Automated Provisioning & Logging, Okta/HRIS automation, and ABAC.
What you'll do
- Play a vital role in the continued development of infrastructure IAM at Marqeta.
- Drive identity orchestration in AWS, using a combination of cloud-native and vendor solutions where appropriate.
- Act as a leading voice and SME for Okta, developing simple tooling where needed and processes to simplify access to infrastructure resources.
- Mentor peers across IT and Security on the identity space, providing cross-team training and supporting career development for more junior engineers.
What we're looking for
- You have worked in a career path that indicates an intrinsic motivation around identity and access management.
- You have at least 4+ years of experience in an SRE, DevOps, Infrastructure Security, Cloud Security, or equivalent role leveraging AWS.
- Direct experience designing, implementing and scaling AWS identity-based policies, Resource-based policies, AWS SSO, AWS Organizations service control policies (SCPs), and IAM Permission Boundaries.
- You have a solid technical background in implementing "modern authentication" technologies at scale.
- Have strong opinions around OAuth, SAML, OIDC, and mTLS.
- Deep experience deploying AuthN and AuthZ solutions leveraging Okta as an IDP.
- Familiarity with low/no-code workflow tooling and its design.
- Experience working in environments with a SaaS-first / cloud-first identity and access management focus.
- Experience with ZeroTrust-based access and, more importantly, the organizational processes required for scalable ZeroTrust to succeed.
- Experience deploying and maintaining certificates as part of a user and device AuthN/AuthZ strategy.
- Strong scripting skills in Python, Ruby, or similar and experience leveraging RESTful APIs to build tools or integrations.
Nice-to-have
- Comfortable working in a high-visibility position, and finds communication/collaboration easy over video chat.
- Experience leveraging Terraform or similar IaC/CAC technologies to manage SaaS infrastructure.
- Experience developing/implementing custom integrations/solutions to enable seamless identity integration into internal application development workflows.
- Experience in Fintech or Financial Services.
Benefits and Perks
- Flexible time off – take what you need
- Retirement savings program with company contribution
- Employee insurance premiums paid 100% + coverage for dependents and pets
- Family forming benefits including fertility support and up to 20 weeks Parental Leave
- Free therapy sessions, financial coaching, and a Wellness stipend
- Monthly stipend to support our hybrid work model
- Equity in a publicly-traded company
- Bi-annual “Hack Week” to support and reward innovation
Learn more about Marqeta on our Website, Twitter and LinkedIn.
Our Applicant and Candidate Privacy Notice applies to the personal data that you directly provide to us or that we collect during the application and candidate recruitment process.
#LI-Remote