Sr Manager, Identity Operations & Engineering

WEX•Chicago, IL

1d•$152,400 - $173,300

About The Position

WEX is seeking a strategic, critical-thinking enterprise Process Owner for its identity lifecycle as the company modernizes identity operations. The role will define strategy, prioritization, and technical readiness for Identity and Access Management (IAM) initiatives, including automation of identity lifecycles, reduction of manual ticket-driven provisioning, and migration from SailPoint IdentityIQ to SailPoint Identity Security Cloud (ISC). The position partners closely with application owners to standardize and prepare identity data for integration, while coordinating with Information Security’s SailPoint administration and configuration team, which executes final platform configurations and deployments. The role leads IAM operations and engineering teams, including Active Directory engineers, and is accountable for identity lifecycle, engineering, and provisioning outcomes. It will establish governance, measurable service and risk indicators, integration onboarding standards, and continuous improvement practices. Key transformation goals include centralizing access requests in SailPoint ISC, enabling event-driven termination processing, onboarding enterprise applications, and establishing scalable access-control roles and entitlement governance.

Requirements

At least 7 years of technical leadership experience in Identity and Access Management, in a Product Owner, Solutions Architect, or Operations/Engineering Manager capacity.
Demonstrated success executing enterprise-level IAM transformations.
Strong architectural understanding of SailPoint Identity Security Cloud (ISC) data models, API/SCIM integrations, Active Directory, Workday as an authoritative HR source, and enterprise ITSM platforms.
Relevant industry certification(s) required; examples include Certified Identity and Access Manager (CIAM), CISSP, CISM, ITIL v4 Foundation or Strategic Leader, or SailPoint-specific certifications.
Deep understanding of ITSM/ITIL frameworks and a proven track record applying observability and toil-reduction principles to operational workflows.
Strategic stakeholder-management skills, including the ability to co-lead governance committees, partner with decentralized application owners, and collaborate with Information Security administration teams.
Experience designing and implementing RBAC, ABAC, or hybrid access-control frameworks for least-privilege security architectures.

Responsibilities

Serve as the accountable Process Owner for Joiner, Mover, and Leaver identity lifecycle outcomes and IAM engineering and provisioning outcomes.
Co-host and operationalize the IAM Governance Council with Information Security leadership; drive policy reviews, backlog prioritization, continuous improvement, and measurable KPIs/KRIs.
Define business and technical requirements for automated identity lifecycle workflows, including Workday-attribute-based birthright access and event-triggered mover processes.
Lead and develop IAM Operations and IAM Engineering teams, including Active Directory engineers.
Partner continuously with the Information Security SailPoint administration and configuration team; provide tested integration data and guide configurations to meet operational requirements.
Support migration from legacy on-premises SailPoint IdentityIQ to SailPoint Identity Security Cloud (ISC).
Centralize access requests in SailPoint ISC and decommission the legacy Employee Service Portal (ESP/JSM) for IAM requests and manual fulfillment routing.
Transition from delayed termination batch synchronization to event-driven termination processing and end-to-end access revocation upon employee separation.
Ensure engineering, integration, and operations comply with ITSM/ITIL standards; use metrics to improve performance, reduce toil, and minimize manual administrative work.
Oversee enterprise directory-services health, security, lifecycle management, availability, and integration with SailPoint.
Define directory-services architectural standards, including infrastructure modernization, group-policy management, and authentication-protocol improvements to support zero trust.
Serve as primary technical liaison to application owners and lead onboarding of WEX applications into SailPoint ISC.
Define an application-onboarding framework and tiered, risk-based prioritization backlog.
Work with application teams to design, extract, and standardize identity data payloads that accurately correlate identities to Global Workday IDs (WIDs).
Oversee integration preparation, including data mapping, payload sanitization, and pre-production testing, before handing validated packages to Information Security for configuration.
Replace manual service-desk tickets with automated, API-driven provisioning workflows.
Partner with business leaders to develop a mature, scalable RBAC, ABAC, or hybrid role model supporting least privilege.
Lead rationalization of approximately 10,600 entitlements to create a business-friendly self-service request catalog.
Design roles that enforce Segregation of Duties boundaries and prevent toxic combinations within a role while balancing security and operational efficiency.
Consolidate role definitions and ownership assignments in SailPoint, decommissioning external spreadsheet-based role tracking.