Senior IT Systems Engineer

Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card-issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real-time.   Marqeta is powering the most well-known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc.). Today nearly 8 out of 10 Americans use a product powered by Marqeta every week. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.

As Marqeta’s Senior IT Systems Engineer, you’ll apply a keen focus to designing and implementing sustainable and scalable solutions, particularly focused on identity services.

With your accomplished background, expertise, and build/solve/automate mindset, you’ll be key to building and improving upon a solid foundation that can support Marqeta’s growth and success.

As a member of the Business Technology (BusTech) Infrastructure Engineering team, you will be part of a team of engineers who deliver reliable infrastructure and SaaS services that empower and accelerate Marqetans to do their best work.

This role will be performed in Warsaw, Poland. We’d love for you to join us!

What You’ll Do

• Design, implement and lead operations focused on Corporate Identity tooling
• Apply modern engineering practices, without the strings of a legacy techstack approach
• Define the automation workflows necessary to efficiently and securely onboard and offboard users
• Build and configure various tools used to automate identity management, account provisioning and deprovisioning, and ensure access by role or attribute
• Design and implement the necessary RBAC/ABAC model for our corporate identities
• Manage policies and single sign-on with Okta; identify and drive efficiencies and improvements
• Manage and configure G Suite for enterprise-wide implementation of services
• Design and implement, in conjunction with other teams, any auditing workflows that are necessary for access groups
• Drive technical and process improvements to support a security-first environment
• Identify and resolve inefficiencies in workflow and manual process through automation
• Build and maintain internal and external documentation around processes and workflows
• Drive and support the development and implementation of the technology roadmap for our corporate identity systems and services, in collaboration with multiple teams
• Build, scale, and operate cloud-based IT systems and tools
• Mentor other engineers on the team, drawing on your experience to provide thoughtful direction
• Maintain and improve reliability of BusTech Infrastructure systems
• Respond to, investigate, and resolve incidents. Support e-discovery, compliance, and audit efforts.

What We’re Looking For

• 5+ years of Systems/Infrastructure Engineering experience
• 3+ years of experience with Okta
• 3+ years of experience with Identity and Access Management (IAM) lifecycle, including designing, implementing or supporting identity lifecycle processes and systems at scale; strong understanding of modern RBAC and ABAC principles & practices; JIT (just in time provisioning) processes; auth frameworks and protocols (e.g., SAML, OAuth, SCIM, OpenID, etc)
• Most recent professional experience is rooted in cloud-native technology at scale, including extensive experience with SaaS operations
• Extensive experience with G Suite administration at scale
• Experience with cloud application integration and workflow automation
• Experience with cloud infrastructure (including compute, storage, networking)
• Working knowledge of a programming language such as Python, JavaScript, GoLang
• Experience with cloud infrastructure configuration management, orchestration, automation using Terraform, Ansible, or similar
• Experience with and working knowledge of API-based tooling (e.g., Postman)
• Experience implementing and maintaining cloud and automated patch management tooling and processes.

Nice-To-Haves

• Experience with Okta ASA (Advanced Server Access)
• Experience with Okta Workflows or BetterCloud
• Security knowledge, experience, or certification(s) in areas such as email, endpoint, network, PKI, Zero Trust, CASB
• Working knowledge of one or more compliance standards (PCI, SOX, GDPR, SOC)
• Experience with AWS Workspaces
• AWS Cloud certification or equivalent experience
• Experience with Git and working with Github or similar source code management platforms
• Experience in the Payments industry
• Network certification or equivalent experience
• Understanding of GraphQL or GraphQL-based databases (particularly in tooling such as JupiterOne).

Manager

• Henry Ukaegbu

Recruiter For This Role

• Louise Devlin

Typical Process

• Application submission
• Recruiter phone call
• Hiring manager video call
• Virtual “Onsite” consisting of 4-5, 45 min calls
• Offer!

#LI-Hybrid