Senior Security Engineer - Cryptography & Key Management

We are seeking a Senior Security Engineer based in Canada with up to 3 years of experience in cryptography and key management. This role offers the opportunity to grow your career while working on cutting-edge security technologies that protect sensitive data.

You’ll have the chance to:

1. Contribute to Cloud Data Security, including data discovery, classification, and protection.
2. Support and enhance Encryption & Key Management initiatives.
3. Assist in PKI & Certificate Management strategies and deployments.

This role can be performed anywhere in Canada. If you are passionate about data security and looking to develop your expertise, we would love to have you on board!

The Impact You'll Have

• Support the development of data security architecture and strategies.
• Help define and implement encryption and secrets management standards.
• Assist in deploying and managing cloud-based Key Management Services (KMS) and Hardware Security Modules (HSMs).
• Maintain and improve Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) tools.
• Provide operational support and ensure security compliance across systems.
• Document procedures and help ensure alignment with industry standards like PCI-DSS, NIST and FIPS.

Who You Are

• A minimum of 5 years related experience with a Bachelor’s degree; or 3 years and a Master’s degree; or a PhD with 2 years’ experience; or an equivalent combination of related education and work experience.
• 2+ years of experience in PKI, crypto algorithms and Hardware Security Modules (HSMs)
• 3+ years of experience as a data security engineer, maintaining critical encryption and key management systems to protect sensitive data across cloud environments.
• Knowledge of cloud computing architectures and Infrastructure as Code (IaC).
• Strong collaboration skills and a willingness to grow in the role.
• Problem-solving abilities to handle security challenges and risks.

Nice to Have

• Experience working with Thales HSMs, AWS KMS, HashiCorp Vault, or AWS Secrets Manager.
• Experience developing scripts using python, java, shell scripts on linux systems
• Exposure to Kubernetes or IaC tools such as Terraform.
• CISSP, CCSP, CISA or other appropriate certifications is a plus.

Job Expectations

• Occasional travel (up to 10%).
• A hiring process that includes an application, recruiter call, hiring manager video call, and a virtual “onsite” interview.

Compensation and Benefits

Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. 

When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position, reflected in CAD,  is: 119,400 - 149,300.

We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.

Along with monetary compensation, Marqeta offers

• Multiple health insurance options
• Flexible time off – take what you need
• Retirement savings program with company contribution
• Equity in a publicly-traded company 
• Monthly stipend to support our remote work model
• Annual “development dollars” to support our people growth and development
• Family-forming benefits and up to 20 weeks of Parental Leave