Identity & Access Management (IAM) Engineer

Toyota North America•Plano, TX

22h

About The Position

Toyota Financial Services (TFS) is seeking an Identity and Access Management (IAM) SailPoint Engineer to join the IAM SailPoint Engineering team within Information Security. This hands-on engineering role configures, integrates, and supports the SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) platforms across Identity Governance and Administration (IGA) and Identity Lifecycle Management. The engineer works alongside Lead and Senior Engineers, contributes to similar engineering work, and develops depth and career growth in identity engineering.

Requirements

At least 2 years of IAM experience, including hands-on experience configuring and supporting SailPoint IdentityIQ and/or Identity Security Cloud.
Working knowledge of Identity Governance and Administration and Identity Lifecycle Management, including automated provisioning and deprovisioning, access requests, certifications, and role-based access.
Experience implementing multiple SailPoint integration types, such as AD/LDAP, JDBC, Web Services/REST, SCIM, and delimited-file integrations, and writing or modifying rules, transforms, and workflows using Bean Shell/Java and JSON.
Familiarity with SAML, OAuth, and OIDC access protocols.
Strong troubleshooting skills across SailPoint connectors, aggregation, provisioning, and target applications.
Knowledge of SOX, GDPR, and PCI-DSS, and of aligning IAM processes with audit requirements.
Experience working in an Agile delivery model using Jira, Confluence, and ServiceNow, including SDLC and change management practices.
Excellent communication and collaboration skills, with willingness to learn from senior engineers and support teammates.

Nice To Haves

Bachelor’s degree in computer science, Information Security, or a related field.
SailPoint certifications, such as IdentityIQ Engineer or Identity Security Cloud Engineer, or other IAM certifications, such as ISC2 SSCP.
Experience integrating IAM with AWS or Azure.
Exposure to Okta, Auth0, or ForgeRock for SSO, MFA, or CIAM.

Responsibilities

Configure, build, and support SailPoint IdentityIQ and Identity Security Cloud, including identity profiles, roles, access profiles, certifications, workflows, and Joiner/Mover/Leaver lifecycle events.
Onboard applications through integration types including Active Directory/LDAP, JDBC, Web Services/REST, SCIM, and delimited-file (disconnected) sources, and implement the associated rules, transforms, and provisioning policies.
Partner with Business Systems Analysts and QA to triage requests, clarify requirements, troubleshoot defects, and support testing through implementation.
Complete engineering work end to end, including building and unit testing changes, documenting configurations, and preparing changes for deployment through change management.
Support Lead and Senior Engineers with platform enhancements, upgrades, and migration work, and assist team members with troubleshooting and delivery.
Ensure SailPoint configurations and integrations meet IAM standards and compliance requirements, including SOX, GDPR, and PCI-DSS.
Collaborate with IAM Governance, IAM Operations, Incident Response, and application owners to resolve issues and deliver identity solutions.

Benefits

Professional growth and development programs.
Tuition reimbursement.
Team Member Vehicle Purchase Discount.
Toyota Team Member Lease Vehicle Program, if applicable.
Comprehensive health care and wellness plans for the employee’s family.
Toyota 401(k) Savings Plan with company match and an annual Toyota retirement contribution, if applicable.
Paid holidays and paid time off.
Referral services related to prenatal services, adoption, childcare, schools, and more.
Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
Relocation assistance, if applicable.