Identity & Access Management (IAM) Engineer, Senior

Toyota•Plano, TX

16h

About The Position

Toyota Financial Services (TFS) is seeking a Senior Identity and Access Management Engineer to join the SailPoint engineering team within its Information Security organization. This hands-on engineering role designs, configures, and manages the Identity Governance and Administration solution across SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC). The engineer works on identity lifecycle management, application onboarding, migration, and troubleshooting, applying a strong software development and SDLC foundation. Experience with both IIQ and ISC is highly preferred, and software engineers with hands-on SailPoint experience are encouraged to apply. The position provides technical direction to contract engineers and works closely with Business Systems Analysts and Quality Assurance teams to deliver secure, high-quality, audit-ready solutions. The role supports governance and regulatory requirements, identity-related security incidents, and continuous improvement and automation using SailPoint REST APIs and current platform capabilities. Toyota does not offer support or sponsorship for employment-based visas or other work authorization for this role. Applicants must have the right to work in the United States without Toyota immigration support or sponsorship now or in the future.

Requirements

5+ years of experience in Identity and Access Management or software engineering, including 3+ years of hands-on SailPoint IdentityIQ and/or Identity Security Cloud engineering experience.
Hands-on experience designing and configuring SailPoint IGA capabilities, including identity lifecycle management, provisioning, access requests, and access certifications.
Proven experience onboarding applications using SailPoint connectors such as Active Directory, LDAP, JDBC, delimited file, Web Services/REST, and SCIM.
Strong development foundation in Java and/or Bean Shell, with working knowledge of XML, JSON, SQL, and REST APIs.
Solid understanding of SDLC and engineering practices, including Git or equivalent version control, code reviews, CI/CD, testing, and production change control.
Strong troubleshooting skills across SailPoint applications, connectors, rules, workflows, tasks, and integrations.
Understanding of Identity Governance concepts, including Role-Based Access Control, role modeling, separation of duties, access reviews, and least privilege.
Knowledge of SOX, GDPR, and PCI-DSS compliance frameworks and experience aligning IAM solutions with audit requirements.
Experience with Agile methodologies and tools such as Jira, Confluence, and ServiceNow.
Experience providing technical direction or mentorship to engineers, including contract or vendor resources.
Excellent communication and cross-functional collaboration skills, including working with BSAs, QA, application teams, and business stakeholders.

Nice To Haves

SailPoint certifications, such as SailPoint Certified IdentityIQ Engineer or SailPoint Certified Identity Security Engineer, or equivalent IAM/security certifications.
Familiarity with identity protocols such as SAML, OAuth2, OIDC, and SCIM.
Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
Bachelor’s degree in computer science, Information Security, or a related field.

Responsibilities

Own the end-to-end technical design and build of SailPoint solutions, ensuring configurations align with IAM architecture, approved design patterns, and TFS security standards.
Engineer identity lifecycle management, including joiner/mover/leaver processes, birthright access, provisioning and deprovisioning, and integration with HR authoritative sources.
Lead application onboarding for connected and disconnected applications, including connector configuration, aggregation, correlation, account and entitlement mapping, and provisioning policies.
Build and maintain SailPoint customizations, including Bean Shell/Java rules, workflows, forms, and tasks, as well as ISC transforms, cloud rules, and event-triggered workflows.
Support migration opportunities from SailPoint IIQ to ISC, including assessment, gap analysis, rebuilding IIQ customizations using ISC-native capabilities, hybrid coexistence, and cutover planning.
Serve as an escalation point for complex SailPoint issues, diagnosing connector, aggregation, provisioning, workflow, and performance problems through log analysis and structured root cause analysis.
Configure and support access requests, approvals, access certifications, roles, and separation-of-duties policies to meet governance and regulatory requirements.
Apply SDLC and engineering best practices, including version control, code review, unit testing, environment promotion, change management, and release readiness.
Provide technical direction to contract engineers by prioritizing and assigning work, reviewing configurations and code, and ensuring deliverables meet TFS quality and security standards.
Partner with Business Systems Analysts to translate business access requirements into technical designs, and with QA teams to define test scenarios and support SIT, UAT, and regression testing.
Create and maintain technical design documents, runbooks, and knowledge transfer artifacts that turn tribal knowledge into repeatable, supportable processes.
Support identity-related security incidents and drive continuous improvement and automation using SailPoint REST APIs and current platform capabilities.

Benefits

Professional growth and development programs
Tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program, if applicable
Comprehensive health care and wellness plans for the entire family
Toyota 401(k) Savings Plan with company match and an annual retirement contribution regardless of whether the employee contributes, if applicable
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools, and more
Tax Advantaged Accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
Relocation assistance, if applicable