Sure they can. They're private entities, they can do whatever they want. Unless a case made it all the way to the Supreme Court and a decision was made to declare testing for marijuana unconstitutional. Then there are always other penalties companies can impose on employees. Such as higher medical insurance co pays. Some companies already do that to tobacco users, and tobacco is legal. Some companies test for alcohol, and that is legal too!