
Manager, Identity Security
Marqeta
full-time
Posted on:
Location Type: Remote
Location: Remote • 🇺🇸 United States
Visit company websiteSalary
💰 $167,100 - $244,400 per year
Job Level
SeniorLead
Tech Stack
AWSCloudEC2PythonTerraform
About the role
- Provide Technical and managerial leadership to a team of 5 to 6 Identity Security Engineers
- Lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles.
- Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle management.
- Automate identity provisioning, de-provisioning, and access reviews using tools and infrastructure-as-code.
- Design IAM integrations for AWS-native services ( EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta).
- Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation.
- Mentor junior engineers and serve as a technical lead for IAM-related projects.
- Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle.
- Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements.
Requirements
- A minimum of 15 years related experience with a Bachelor’s degree or equivalent combination of related education and work experience. Must have been a people manager
- Establish clear, achievable objectives for the team that align with organizational goals
- Experience in Agile/Scrum environments holding daily stand-ups, sprint planning, and retrospectives, using tools like Jira, and estimating user stories
- Comfortable working in a remote only environment and getting hands-on when required
- Providing guidance, support, and feedback to help team members grow in their roles
- Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint, Britive).
- Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation.
- Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation).
- Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos).
- Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives.
- Experience in scripting (e.g., Python, PowerShell) to automate IAM operations.
- Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc.
- Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.
- Excellent communication skills and ability to influence and lead cross-functional teams.
Benefits
- Multiple health insurance options
- Flexible time off – take what you need
- Retirement savings program with company contribution and after tax contributions
- Equity in a publicly-traded company and an Employee Stock Purchase Program
- Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
- Free therapy sessions, financial and professional coaching, and legal advice
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Through Flex First, the freedom to live and work wherever you and your family thrive
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
IAM strategiescloud-native architectureidentity provisioninginfrastructure-as-codeAWS IAMTerraformCloudFormationscriptingauthentication protocolsauthorization protocols
Soft skills
technical leadershipmentoringcollaborationcommunicationinfluencingteam managementguidancesupportfeedbackobjective setting