Identity & Access Management (IAM) Engineer, Lead

Toyota North America • Plano, TX

2d

About The Position

Toyota Financial Services (TFS) is seeking an experienced Lead Identity and Access Management (IAM) Operations Engineer for its Information Security team. The role is a technical subject matter expert position focused on operating, supporting, troubleshooting, and continuously enhancing SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), and customer identity and access management (CIAM) platforms such as ForgeRock, Okta Customer Identity, and Auth0. The engineer will provide advanced L3 support, lead technical efforts during identity-related security incidents, mentor junior engineers, and coordinate with Governance, Incident Response, Engineering, and Compliance teams to support secure, compliant, and efficient identity operations.

Responsibilities also include maintaining IIQ rules and application onboarding configurations, supporting access certification campaigns, and helping integrate and operationalize other IAM tools and privileged access management (PAM) solutions as needed. The role supports audit readiness and regulatory alignment, including SOX, GDPR, and PCI-DSS. Toyota states that it does not provide immigration support or sponsorship for this position; applicants must have the right to work in the United States without Toyota sponsorship.

Requirements

• At least 7 years of hands-on experience in Identity and Access Management.
• Expert-level proficiency in SailPoint IdentityIQ (IIQ) and ISC, and CIAM platforms such as ForgeRock, Okta Customer Identity, and Auth0.
• Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, connector configuration and troubleshooting, and HR system integration within SailPoint.
• Strong experience designing, implementing, and supporting CIAM capabilities, including customer registration, authentication, authorization, federation, SSO, MFA, account recovery, and customer profile management.
• Strong understanding of SOX, GDPR, and PCI-DSS and experience aligning IAM operations with audit requirements.
• Experience with ITIL, Lean, and Agile methodologies and tools such as Jira, Confluence, and ServiceNow.
• Experience with SailPoint REST APIs for automation and operational tooling.
• Ability to write or troubleshoot Bean Shell for IIQ and JSON-based rules for ISC.
• Familiarity with SailPoint plugin management, including installation, configuration, and troubleshooting.
• Experience troubleshooting custom connectors, including schema discovery and provisioning logic.
• Understanding of Identity Governance concepts, including SoD policies, risk scoring, and access modeling.
• Proficiency in identity and access protocols including SAML, OAuth2, OIDC, and WebAuthN.
• Proven ability to mentor and lead technical teams in complex IAM environments.

Nice To Haves

• Experience migrating between IIQ and ISC or working with hybrid coexistence models.
• Familiarity with CIAM platforms such as Okta and Auth0, including designing and managing customer identity solutions.
• Bachelor’s degree in computer science, Information Security, or a related field.
• IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent.
• Experience integrating IAM solutions with cloud platforms such as AWS or Azure.

Responsibilities

• Manage, support, and continuously enhance SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), and CIAM platforms, including advanced L3 troubleshooting and platform administration.
• Collaborate with Governance, Incident Response, Engineering, and Compliance teams to align IAM operations with organizational policies and regulatory requirements.
• Operate and support Okta/Auth0 CIAM platforms as secondary responsibilities, maintaining secure and scalable customer identity solutions.
• Lead technical efforts during identity-related security incidents and provide expert guidance and resolution.
• Maintain IIQ rules, including Before/After Provisioning Rules, Correlation Rules, and custom workflows.
• Maintain IIQ application onboarding configurations, including schema updates, attribute mappings, and provisioning policies.
• Support IIQ certification campaigns, including setup, execution, monitoring, and remediation.
• Mentor and coach junior IAM engineers and foster knowledge sharing and skill development.
• Drive continuous improvement by staying current with IAM trends, emerging technologies, and best practices.
• Support integration and operational readiness of other IAM tools and PAM solutions as needed.
• Ensure IAM processes and solutions meet audit readiness and compliance standards.

Benefits

• Professional growth and development programs.
• Tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program, if applicable.
• Comprehensive health care and wellness plans for the entire family.
• Toyota 401(k) Savings Plan with a company match and an annual retirement contribution regardless of employee contribution, if applicable.
• Paid holidays and paid time off.
• Referral services related to prenatal services, adoption, childcare, schools, and more.
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
• Relocation assistance, if applicable.
• Teamwork-, flexibility-, and respect-oriented work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed