Manager of Identity Security, Marqeta

• A minimum of 15 years related experience with a Bachelor’s degree or equivalent combination of related education and work experience. Must have been a people manager
• Establish clear, achievable objectives for the team that align with organizational goals
• Experience in Agile/Scrum environments holding daily stand-ups, sprint planning, and retrospectives, using tools like Jira, and estimating user stories
• Comfortable working in a remote only environment and getting hands-on when required
• Providing guidance, support, and feedback to help team members grow in their roles
• Strong experience with IAM tools (e.g., Okta, CyberArk, Ping, SailPoint, Britive)
• Deep knowledge of IAM in cloud-native environments, especially AWS IAM, roles, policies, permissions boundaries, and federation
• Proficiency in infrastructure-as-code (e.g., Terraform, CloudFormation)
• Familiarity with authentication and authorization protocols (SAML, OAuth2, OpenID Connect, Kerberos)
• Strong grasp of directory services like Active Directory, LDAP, and cloud-based alternatives
• Experience in scripting (e.g., Python, PowerShell) to automate IAM operations
• Solid understanding of compliance standards: NIST, SOC 2, PCI DSS, etc
• Proven experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows
• Excellent communication skills and ability to influence and lead cross-functional teams

Desirable

• As Marqeta’s Manager of Identity and Access Management (IAM), you bring a strong passion for IAM and proven expertise in cloud-native environments, preferably AWS
• In this role, you’ll shape and implement modern identity strategies that secure access across all of Marqeta’s systems and services, built entirely in the cloud with no data-center footprint
• Join us in building a secure, scalable, and frictionless IAM program where you’ll play a crucial part in:
• Building and evolving our Identity Governance and Administration (IGA) capabilities
• Implementing Privileged Access Management (PAM) in a cloud-first (AWS-focused) environment
• Designing and architecting a Certificate Lifecycle Management solution that supports cloud-native workloads
• Driving integration of IAM across AWS services, SaaS platforms, and developer/DevOps pipelines
• Designing identity and access controls to protect AI/ML systems—ensuring secure access to training data, models, and inference APIs
• Provide Technical and managerial leadership to a team of 5 to 6 Identity Security Engineers
• Lead implementation of robust IAM strategies aligned with cloud-native architecture and security principles
• Expand and operationalize the IAM program across IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle management
• Automate identity provisioning, de-provisioning, and access reviews using tools and infrastructure-as-code
• Design IAM integrations for AWS-native services ( EC2, S3, IAM, etc.), SaaS platforms, and third-party identity tools (e.g., Okta)
• Promote and enforce least privilege and zero-trust principles through scalable access controls and policy automation
• Mentor junior engineers and serve as a technical lead for IAM-related projects
• Collaborate with Security, DevOps, and Infrastructure teams to embed IAM controls across the engineering lifecycle
• Stay ahead of emerging trends and continuously refine IAM strategy based on evolving cloud threats and compliance requirements
• Manager: Chetan Jha
• Recruiter for this role: Kayla Osuna