Identity & Access Management (IAM) Engineer, Lead

Toyota • Plano, TX

19h

About The Position

Toyota Financial Services is seeking an experienced Lead Identity and Access Management Operations Engineer to join its Information Security team. The role requires subject matter expertise in SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), and customer identity and access management (CIAM) platforms, including ForgeRock, Okta Customer Identity, and Auth0. The engineer will lead IAM operations and advanced troubleshooting, mentor junior engineers, and work across teams to support secure, compliant, and efficient identity operations.

The position manages and enhances SailPoint and CIAM platforms, supports identity-related security incidents, and maintains IIQ rules, application onboarding, and certifications. It also contributes to integrations and operational readiness for other IAM tools and privileged access management solutions. IAM processes must meet audit and compliance standards, including SOX, GDPR, and PCI-DSS.

Requirements

• At least 7 years of hands-on Identity and Access Management experience.
• Expert-level proficiency in SailPoint IdentityIQ and ISC, and CIAM platforms such as ForgeRock, Okta Customer Identity, and Auth0.
• Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, connector configuration and troubleshooting, and HR system integration within SailPoint.
• Strong experience designing, implementing, and supporting CIAM capabilities, including customer registration, authentication, authorization, federation, SSO, MFA, account recovery, and customer profile management.
• Strong understanding of SOX, GDPR, and PCI-DSS, with experience aligning IAM operations with audit requirements.
• Experience with ITIL, Lean, and Agile methodologies and tools such as Jira, Confluence, and ServiceNow.
• Experience with SailPoint REST APIs for automation and operational tooling.
• Ability to write or troubleshoot Bean Shell for IIQ and JSON-based rules for ISC.
• Familiarity with SailPoint plugin management, including installation, configuration, and troubleshooting.
• Experience troubleshooting custom connectors, including schema discovery and provisioning logic.
• Understanding of Identity Governance concepts, including SoD policies, risk scoring, and access modeling.
• Proficiency in identity and access protocols, including SAML, OAuth2, OIDC, and WebAuthN.
• Proven ability to mentor and lead technical teams in complex IAM environments.

Nice To Haves

• Experience migrating between IIQ and ISC or supporting hybrid coexistence models.
• Familiarity with Okta and Auth0 CIAM platforms and experience designing and managing customer identity solutions.
• Bachelor’s degree in computer science, Information Security, or a related field.
• IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent.
• Experience integrating IAM solutions with cloud platforms such as AWS or Azure.

Responsibilities

• Manage the operation, support, administration, and continuous enhancement of SailPoint IdentityIQ, Identity Security Cloud, and CIAM platforms, including advanced L3 troubleshooting.
• Collaborate with Governance, Incident Response, Engineering, and Compliance teams to align IAM operations with organizational policies and regulatory requirements.
• Operate and support Okta/Auth0 CIAM platforms as secondary responsibilities, ensuring secure and scalable customer identity solutions.
• Lead technical efforts during identity-related security incidents and provide expert guidance and resolution.
• Maintain IIQ rules, including Before/After Provisioning Rules, Correlation Rules, and custom workflows.
• Maintain IIQ application onboarding configurations, including schema updates, attribute mappings, and provisioning policies.
• Support IIQ certification campaign setup, execution, monitoring, and remediation.
• Mentor and coach junior IAM engineers and foster knowledge sharing and skill development.
• Drive continuous improvement by staying current with IAM trends, emerging technologies, and best practices.
• Support integration and operational readiness of other IAM tools and PAM solutions as needed.
• Ensure IAM processes and solutions meet audit-readiness and compliance standards.

Benefits

• Professional growth and development programs.
• Tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program, if applicable.
• Comprehensive health care and wellness plans for the employee's entire family.
• Toyota 401(k) Savings Plan with a company match and an annual retirement contribution, regardless of employee contributions, if applicable.
• Paid holidays and paid time off.
• Referral services related to prenatal services, adoption, childcare, schools, and more.
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
• Relocation assistance, if applicable.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed