Senior IT Systems Engineer

<p>Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card-issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real-time.   Marqeta is powering the most well-known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc.). Today nearly 8 out of 10 Americans use a product powered by Marqeta every week. This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.</p> <p>As Marqeta’s <strong>Senior IT Systems Engineer</strong>, you’ll apply a keen focus to designing and implementing sustainable and scalable solutions, particularly focused on identity services.</p> <p>With your accomplished background, expertise, and build/solve/automate mindset, you’ll be key to building and improving upon a solid foundation that can support Marqeta’s growth and success.</p> <p>As a member of the Business Technology (BusTech) Infrastructure Engineering team, you will be part of a team of engineers who deliver reliable infrastructure and SaaS services that empower and accelerate Marqetans to do their best work.</p> <p>This role will be performed in Warsaw, Poland. We’d love for you to join us!</p> <p><strong>What You’ll Do</strong></p> <ul> <li>Design, implement and lead operations focused on Corporate Identity tooling</li> <li>Apply modern engineering practices, without the strings of a legacy techstack approach</li> <li>Define the automation workflows necessary to efficiently and securely onboard and offboard users</li> <li>Build and configure various tools used to automate identity management, account provisioning and deprovisioning, and ensure access by role or attribute</li> <li>Design and implement the necessary RBAC/ABAC model for our corporate identities</li> <li>Manage policies and single sign-on with Okta; identify and drive efficiencies and improvements</li> <li>Manage and configure G Suite for enterprise-wide implementation of services</li> <li>Design and implement, in conjunction with other teams, any auditing workflows that are necessary for access groups</li> <li>Drive technical and process improvements to support a security-first environment</li> <li>Identify and resolve inefficiencies in workflow and manual process through automation</li> <li>Build and maintain internal and external documentation around processes and workflows</li> <li>Drive and support the development and implementation of the technology roadmap for our corporate identity systems and services, in collaboration with multiple teams</li> <li>Build, scale, and operate cloud-based IT systems and tools</li> <li>Mentor other engineers on the team, drawing on your experience to provide thoughtful direction</li> <li>Maintain and improve reliability of BusTech Infrastructure systems</li> <li>Respond to, investigate, and resolve incidents. Support e-discovery, compliance, and audit efforts.</li> </ul> <p><strong>What We’re Looking For</strong></p> <ul> <li>5+ years of Systems/Infrastructure Engineering experience</li> <li>3+ years of experience with Okta</li> <li>3+ years of experience with Identity and Access Management (IAM) lifecycle, including designing, implementing or supporting identity lifecycle processes and systems at scale; strong understanding of modern RBAC and ABAC principles &amp; practices; JIT (just in time provisioning) processes; auth frameworks and protocols (e.g., SAML, OAuth, SCIM, OpenID, etc)</li> <li>Most recent professional experience is rooted in cloud-native technology at scale, including extensive experience with SaaS operations</li> <li>Extensive experience with G Suite administration at scale</li> <li>Experience with cloud application integration and workflow automation</li> <li>Experience with cloud infrastructure (including compute, storage, networking)</li> <li>Working knowledge of a programming language such as Python, JavaScript, GoLang</li> <li>Experience with cloud infrastructure configuration management, orchestration, automation using Terraform, Ansible, or similar</li> <li>Experience with and working knowledge of API-based tooling (e.g., Postman)</li> <li>Experience implementing and maintaining cloud and automated patch management tooling and processes.</li> </ul> <p><strong>Nice-To-Haves</strong></p> <ul> <li>Experience with Okta ASA (Advanced Server Access)</li> <li>Experience with Okta Workflows or BetterCloud</li> <li>Security knowledge, experience, or certification(s) in areas such as email, endpoint, network, PKI, Zero Trust, CASB</li> <li>Working knowledge of one or more compliance standards (PCI, SOX, GDPR, SOC)</li> <li>Experience with AWS Workspaces</li> <li>AWS Cloud certification or equivalent experience</li> <li>Experience with Git and working with Github or similar source code management platfo