Staff Security Engineer, Marqeta

• A minimum of 8 years related experience with a Bachelor’s degree; or 5 years and a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience
• 5+ years of professional experience within data security including encryption, tokenization, PKI implementation and key management
• 4 years+ of in-depth experience working with payment and/or general-purpose HSMs, cloud KMSs
• 4+ years of practical experience in encryption algorithms (e.g., AES, RSA), protocols (e.g., TLS/SSL), key management, secrets management
• 3+ years with cloud computing architectures and Infrastructure as Code (e.g., Terraform)
• 2+ years working experience with security regulatory/compliance requirements including PCI, NIST and GDPR
• 2+ years experience with data security, classification and posture management tooling
• Strong collaboration and communication skills, with the ability to influence cross-functional teams and stakeholders
• Problem-solving skills to navigate complexity and security risks with confidence and flexibility

Desirable

• We’re seeking an experienced Staff Security Engineer with a strong passion for data security and a deep understanding of encryption and key management
• In this role, you’ll have the opportunity to shape and implement cutting-edge security strategies to protect sensitive data across our platforms
• Join us in building secure cloud environments where you’ll play a crucial part in:
• Cloud Data Security – Driving initiatives around data discovery, classification, and protection
• Encryption & Key Management – Leading encryption and secrets management across the enterprise
• PKI & Certificate Management – Architecting robust public key infrastructures and certificate solutions
• If you're excited about designing and securing the future of data, we’d love to have you on our team!
• Lead the development of enterprise-level data security architecture and strategies
• Define encryption and secrets management standards, ensuring alignment with product development and enterprise needs
• Collaborate closely with security, technology, and privacy teams to implement and maintain data classification, encryption, and key management standards
• Deploy, configure, and manage cloud-based Key Management Services (KMS) and Hardware Security Modules (HSMs)
• Participate in Proof of Concept (POC) testing and demonstrations for new cryptographic products and services
• Serve as a key custodian, overseeing the full lifecycle of sensitive key material, including governance and security controls
• Maintain and update data security tooling such as Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) solutions
• Ensure systems remain compliant with evolving security standards like PCI-DSS and FIPS 140-2 & 140-3
• Provide operational support, including on-call rotation, and document critical procedures such as key lifecycle management and disaster recovery plans
• Research emerging security standards and advise on their integration into our strategies

• A hiring process that includes an application, recruiter call, hiring manager video call, and a virtual “onsite” interview