AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.
About the role
- Security Engineer building IAM, PAM, and IGA capabilities for Marqeta’s cloud-based embedded finance platform. Automating access controls across AWS, SaaS, DevOps, and AI/ML systems.
Responsibilities
- Build Identity Governance and Administration capabilities
- Implement and operate Privileged Access Management in an AWS-focused cloud environment
- Integrate IAM across AWS services, SaaS platforms, and developer/DevOps pipelines
- Design identity and access controls for AI/ML systems, training data, models, and inference APIs
- Configure and maintain Okta SSO, MFA, lifecycle management, policies, SAML/OIDC integrations, and SCIM provisioning
- Manage just-in-time access profiles and PAM policies using platforms such as Britive or CyberArk
- Build and improve access request, approval, and review workflows in IGA platforms such as Lumos or SailPoint
- Automate joiner, mover, and leaver processes and access reviews using scripting, APIs, and infrastructure-as-code
- Partner with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts and troubleshoot access issues
- Support SOC 2, PCI DSS, and other audits by producing access evidence and improving control design
- Document processes, contribute to runbooks, and participate in on-call rotation if applicable
Requirements
- Minimum 3 years of related experience with a Bachelor’s degree; or 2 years with a Master’s degree; or equivalent combination of related education and work experience
- Hands-on experience with IAM tools such as Okta, Entra ID, CyberArk, Ping, and SailPoint
- Working knowledge of SAML, OAuth2/OIDC, and SCIM
- Working knowledge of AWS IAM concepts, including roles, policies, and federation
- Understanding of least privilege and RBAC
- Hands-on scripting skills such as Python or PowerShell for automating IAM operations through APIs
- Familiarity with Active Directory, LDAP, and cloud-based directory alternatives
- Familiarity with NIST, SOC 2, and PCI DSS compliance frameworks
- Clear communication and collaboration with technical and non-technical stakeholders
Benefits
- Multiple health insurance options
- Flexible vacation time with additional floating holidays
- Retirement savings program with company contribution
- Equity in a publicly-traded company
- Monthly stipend to support the remote work model
- Annual development stipend
- Family-forming benefits
- Generous parental leave base salary top-up
- Annual bonuses for eligible employees
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
FTTH security expert auditing PON, CPE, and telecom infrastructure for P1 Security. Producing penetration - test reports and remediation guidance for critical network security.
Lead security for Duetto's hotel revenue management platform across AWS, DevSecOps, compliance, incident response, and enterprise customer trust. Own the security posture for a global hospitality technology business.
Senior CyberArk engineer strengthening Manulife’s enterprise privileged - access security platform. Automating PAM operations, integrations, resilience, and production support.
Senior Security Engineer securing gaiia’s cloud - based telecom operating system. Protecting applications, infrastructure, customer data, and compliance programs across a serverless TypeScript platform.
Cloud security leader supporting ServiceNow’s AI - native SaaS security and Canadian enterprise customers. Leading customer security engagements, incident investigations, and cloud security improvements.
Senior Consultant leading cyber regulatory remediation for banks, broker - dealers, and insurers. Driving incident response, vulnerability, patch, and IAM workstreams to closure.
Cyber Security Specialist protecting Scarborough Health Network hospitals and healthcare infrastructure. Managing security systems, assessments, vulnerabilities, incidents, and compliance across the Central East Region.
Team Lead protecting Wealthsimple clients through fintech risk, fraud, and security operations. Managing CX specialists, threat response, compliance workflows, and performance delivery.
Product Security Engineer building secure CIAM authentication services for Affirm’s pay - over - time platform. Developing Python/Kotlin APIs, MFA, identity integrations, and reliable account - access experiences.