Sr Manager, Identity Operations & Engineering
About The Position
WEX is seeking a strategic, critical-thinking enterprise Process Owner for its identity lifecycle. The role leads a modernization effort to automate identity lifecycles, eliminate manual ticket-driven provisioning, and migrate from legacy SailPoint IdentityIQ to SailPoint Identity Security Cloud (ISC). The Process Owner defines IAM strategy, priorities, requirements, and technical readiness, while partnering closely with application owners and Information Security to standardize identity data, prepare and test integrations, and coordinate platform configuration and deployment. The position leads IAM operations and engineering teams, including Active Directory engineers, and is accountable for joiner, mover, and leaver (JML) lifecycle, engineering, and provisioning outcomes. It also oversees IAM governance, directory services, application onboarding, request automation, and access-control strategy. The role is responsible for advancing measurable service and risk outcomes, reducing manual work, and ensuring IAM activities meet ITSM/ITIL standards. The base pay range is $152,400 to $173,300. WEX's benefits include health, dental and vision insurance, a retirement savings plan, paid time off, health savings and flexible spending accounts, life and disability insurance, tuition reimbursement, and more.
Requirements
- At least 7 years of technical leadership experience in Identity and Access Management, in a Product Owner, Solutions Architect, or Operations/Engineering Manager capacity.
- Demonstrated success executing enterprise-level IAM transformations.
- Strong architectural understanding of SailPoint Identity Security Cloud data models, API/SCIM integrations, Active Directory, Workday as an authoritative HR source, and enterprise ITSM platforms.
- Relevant industry certification(s) demonstrating understanding of identity frameworks and IT service management; examples listed include CIAM, CISSP, CISM, ITIL v4 Foundation/Strategic Leader, or SailPoint-specific certifications.
- Deep understanding of ITSM/ITIL frameworks and a proven record of applying observability and toil-reduction principles to operational workflows.
- Strategic stakeholder-management skills, including ability to co-lead governance committees, partner with decentralized application owners, and collaborate effectively with Information Security administration teams.
- Experience designing and implementing RBAC, ABAC, or hybrid access-control frameworks to support least-privilege security architectures.
Responsibilities
- Act as the primary Process Owner and accountable leader for WEX’s joiner, mover, and leaver identity lifecycle outcomes.
- Co-host and operationalize the IAM Governance Council with an Information Security leader to review policies, prioritize the IAM backlog, align on risk reduction, and establish measurable KPIs and KRIs.
- Define business and technical requirements for automated lifecycle workflows, including birthright access based on Workday attributes and event-triggered mover processes.
- Lead and develop IAM Operations and IAM Engineering teams, including Active Directory engineers.
- Partner continuously with the Information Security SailPoint Administration/Configuration team, providing fully tested integration data and guiding platform configurations to meet operational requirements.
- Support migration from SailPoint IdentityIQ to SailPoint Identity Security Cloud.
- Centralize access requests in SailPoint ISC and decommission the legacy Employee Service Portal (ESP/JSM) for IAM requests and manual fulfillment routing.
- Transition termination processing from delayed batch synchronization to event-driven processing, enabling prompt end-to-end access revocation across target systems.
- Ensure engineering, integration, and operational work adheres to ITSM/ITIL standards; use metrics and continuous improvement to improve performance and reduce manual overhead.
- Oversee enterprise directory services health, security, lifecycle management, availability, and integration with SailPoint.
- Define directory-services architectural standards, including infrastructure modernization, group policy management, and authentication protocols for a zero-trust environment.
- Serve as the primary technical liaison to application owners and lead onboarding of WEX applications into SailPoint ISC.
- Define an application onboarding framework and tiered, risk-based prioritization backlog.
- Partner with application teams to design, extract, and standardize identity data payloads and ensure identities correlate with Global Workday IDs (WIDs).
- Oversee integration preparation, including data mapping, payload sanitization, and pre-production testing before validated packages are handed to Information Security for configuration.
- Replace manual service desk tickets with automated, API-driven provisioning workflows.
- Partner with business leaders to develop a mature, scalable RBAC, ABAC, or hybrid role model supporting least-privilege security.
- Rationalize WEX’s 10,600 entitlements to create a clean, business-friendly self-service request catalog.
- Design roles that enforce Segregation of Duties boundaries and prevent toxic combinations within a role definition.
- Consolidate role definitions and ownership assignments in SailPoint, eliminating external spreadsheet-based role tracking.
Benefits
- Health insurance
- Dental insurance
- Vision insurance
- Retirement savings plan
- Paid time off
- Health savings account
- Flexible spending accounts
- Life insurance
- Disability insurance
- Tuition reimbursement
- Quarterly or annual bonus eligibility for non-sales roles, based on role and applicable plan
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
