Identity & Access Management (IAM) Engineer, Senior

Toyota North America•Plano, TX

About The Position

Toyota Financial Services is seeking a Senior Identity and Access Management Engineer to join the SailPoint engineering team within its Information Security organization. This hands-on engineering role designs, configures, and manages the Identity Governance and Administration solution across SailPoint IdentityIQ and SailPoint Identity Security Cloud. The role focuses on identity lifecycle management, application onboarding, migration, troubleshooting, and delivery of secure, high-quality, audit-ready solutions. It also provides technical direction to contract engineers and collaborates with Business Systems Analysts and Quality Assurance teams. The engineer owns technical design and implementation aligned with IAM architecture, approved patterns, and security standards. The position supports SailPoint IIQ-to-ISC migration, identity governance capabilities, security incidents, and continuous improvement. It applies SDLC and engineering practices across development, testing, change management, and production releases, while maintaining technical documentation and repeatable operational processes.

Requirements

At least 5 years of experience in Identity and Access Management or software engineering, including at least 3 years of hands-on SailPoint IdentityIQ and/or Identity Security Cloud engineering experience.
Hands-on experience designing and configuring SailPoint IGA capabilities, including identity lifecycle management, provisioning, access requests, and access certifications.
Experience onboarding applications using SailPoint connectors such as Active Directory, LDAP, JDBC, delimited file, Web Services/REST, and SCIM.
Strong development foundation in Java and/or Bean Shell, with working knowledge of XML, JSON, SQL, and REST APIs.
Understanding of SDLC and engineering practices, including Git or equivalent version control, code reviews, CI/CD, testing, and production change control.
Strong troubleshooting skills across SailPoint applications, connectors, rules, workflows, tasks, and integrations.
Understanding of Identity Governance concepts, including Role-Based Access Control, role modeling, separation of duties, access reviews, and least privilege.
Knowledge of SOX, GDPR, and PCI-DSS compliance frameworks and experience aligning IAM solutions with audit requirements.
Experience with Agile methodologies and tools such as Jira, Confluence, and ServiceNow.
Experience providing technical direction or mentorship to engineers, including contract or vendor resources.
Excellent communication and cross-functional collaboration skills, including work with Business Systems Analysts, Quality Assurance, application teams, and business stakeholders.
Must have authorization to work in the United States without current or future Toyota immigration support or sponsorship.

Nice To Haves

SailPoint certifications, such as SailPoint Certified IdentityIQ Engineer or SailPoint Certified Identity Security Engineer, or equivalent IAM/security certifications.
Familiarity with identity protocols such as SAML, OAuth2, OIDC, and SCIM.
Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
Bachelor’s degree in computer science, Information Security, or a related field.

Responsibilities

Own the end-to-end technical design and build of SailPoint solutions, ensuring configurations align with IAM architecture, approved design patterns, and TFS security standards.
Engineer identity lifecycle management, including joiner/mover/leaver processes, birthright access, provisioning and deprovisioning, and integration with HR authoritative sources.
Lead application onboarding for connected and disconnected applications, including connector configuration, aggregation, correlation, account and entitlement mapping, and provisioning policies.
Build and maintain SailPoint customizations, including Bean Shell/Java rules, workflows, forms, and tasks, as well as ISC transforms, cloud rules, and event-triggered workflows.
Support migration from SailPoint IIQ to ISC, including assessment, gap analysis, rebuilding IIQ customizations using ISC-native capabilities, hybrid coexistence, and cutover planning.
Diagnose complex SailPoint connector, aggregation, provisioning, workflow, and performance issues through log analysis and structured root cause analysis.
Configure and support access requests, approvals, access certifications, roles, and separation-of-duties policies to meet governance and regulatory requirements.
Apply SDLC and engineering practices, including version control, code review, unit testing, environment promotion, change management, and release readiness.
Provide technical direction to contract engineers by prioritizing and assigning work, reviewing configurations and code, and ensuring deliverables meet quality and security standards.
Partner with Business Systems Analysts to translate business access requirements into technical designs, and with Quality Assurance teams to define test scenarios and support SIT, UAT, and regression testing.
Create and maintain technical design documents, runbooks, and knowledge-transfer artifacts.
Support identity-related security incidents and drive continuous improvement and automation using SailPoint REST APIs and platform capabilities.

Benefits

Professional growth and development programs.
Tuition reimbursement.
Team Member Vehicle Purchase Discount.
Toyota Team Member Lease Vehicle Program, if applicable.
Comprehensive health care and wellness plans for the entire family.
Toyota 401(k) Savings Plan with company match and an annual retirement contribution regardless of employee contribution, if applicable.
Paid holidays and paid time off.
Referral services related to prenatal services, adoption, childcare, schools, and more.
Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
Relocation assistance, if applicable.