Identity & Access Management (IAM) Engineer, Lead

Toyota North America • Plano, TX

2d

About The Position

Toyota Financial Services (TFS) is seeking an experienced Lead Identity and Access Management Engineer to join its Information Security team. The role sets technical direction for the SailPoint identity governance platform and provides design oversight to ensure solutions align with TFS security standards, approved architecture, and best practices. The engineer leads contractor and partner engineering teams and provides technical direction to IAM engineers.

The position leads engineering delivery and technical oversight across SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC), including configuration, integrations, application onboarding, governance capabilities, and platform changes. It also serves as the escalation point for complex SailPoint issues and supports identity-related security incidents. The role partners with architecture, governance, compliance, cloud, application, and operations teams to meet business, policy, regulatory, and audit needs, while identifying automation and continuous-improvement opportunities.

Toyota states that applicants must be authorized to work in the United States without current or future Toyota immigration support or sponsorship. The role is part of TFS's Information Security team.

Requirements

• At least 7 years of hands-on Identity and Access Management experience, including expert-level engineering experience with SailPoint Identity Security Cloud (ISC).
• Proven experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
• Experience leading or providing technical oversight of a migration from SailPoint IIQ to ISC, including hybrid coexistence models.
• Experience directing contractors, vendors, or systems integrator engineering teams and holding deliverables to defined quality and security standards.
• Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, and HR system integration.
• Strong ISC configuration experience, including transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
• Strong understanding of Identity Governance concepts, including role and access modeling, SoD policies, and risk scoring.
• Proficiency with identity and access protocols including SAML, OAuth2, OIDC, and SCIM.
• Strong understanding of security best practices and SOX, GDPR, and PCI-DSS compliance frameworks, with experience translating them into engineering standards.
• Experience with Agile and SDLC practices and tools such as Jira, Confluence, and ServiceNow.
• Proven ability to lead, mentor, and direct engineers in complex IAM environments, with strong communication skills across technical and leadership audiences.

Nice To Haves

• Hands-on SailPoint experience, including Bean Shell rules, workflows, application onboarding, and certifications.
• SailPoint ISC certification or equivalent IAM/security certifications such as CISSP.
• Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
• Familiarity with Okta or CIAM platforms such as ForgeRock, Okta Customer Identity, or Auth0.
• Bachelor’s degree in computer science, Information Security, or a related field.

Responsibilities

• Lead engineering delivery for SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC), aligning solutions with IAM architecture and design patterns, TFS security standards, and best practices.
• Provide technical oversight of the IIQ and ISC environments, including configuration, integrations, and platform changes.
• Lead technical reviews of identity profiles, sources, transforms, access profiles, roles, lifecycle states, and workflows to ensure adherence to approved design patterns.
• Lead contractor and partner engineering resources, set expectations, review deliverables, and ensure work meets TFS quality and security standards.
• Provide technical direction, prioritization, and mentorship to IAM engineers; review configurations and code and build team capability in ISC.
• Enforce engineering standards for code review, secure configuration, SDLC, and release readiness for SailPoint changes.
• Lead application onboarding for connected and disconnected applications, including connector, Virtual Appliance, and provisioning configuration.
• Oversee implementation of access request, certification, and separation-of-duties capabilities to meet governance and regulatory requirements.
• Serve as the technical escalation point for complex SailPoint configuration and engineering issues and provide expert guidance during identity-related security incidents.
• Partner with IAM Architecture, Governance, Compliance, Cloud, Application, and IAM Operations teams to align engineering work with approved designs, business needs, policy, and audit readiness.
• Identify engineering improvements and automation opportunities and stay current with SailPoint capabilities and IAM best practices.

Benefits

• Professional growth and development programs.
• Tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program, if applicable.
• Comprehensive health care and wellness plans for the entire family.
• Toyota 401(k) Savings Plan with company match and an annual retirement contribution, if applicable.
• Paid holidays and paid time off.
• Referral services related to prenatal services, adoption, childcare, schools, and more.
• Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
• Relocation assistance, if applicable.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed