Identity & Access Management (IAM) Engineer, Lead
Toyota USA1 day ago
Plano, TX, USAStaff+
Responsibilities
- Operate, support, troubleshoot, administer, and continuously enhance SailPoint IdentityIQ, Identity Security Cloud, and CIAM platforms.
- Support ForgeRock, Okta Customer Identity, and Auth0 customer identity platforms, including registration, authentication, authorization, federation, SSO, MFA, account recovery, and profile management.
- Maintain IdentityIQ rules, workflows, application onboarding configurations, schema updates, attribute mappings, provisioning policies, certifications, plugins, and custom connectors.
- Lead technical efforts during identity-related security incidents and collaborate with governance, incident response, engineering, and compliance teams.
- Align IAM operations with SOX, GDPR, PCI-DSS, audit, and organizational policy requirements.
- Support IdentityIQ-to-ISC migration or hybrid coexistence efforts, SailPoint REST API automation, and additional IAM or PAM integrations.
- Mentor and coach junior IAM engineers and drive continuous improvement in IAM operations.
Requirements
- At least 7 years of hands-on Identity and Access Management experience.
- Expert-level proficiency with SailPoint IdentityIQ and Identity Security Cloud, plus CIAM platforms such as ForgeRock, Okta Customer Identity, and Auth0.
- Deep experience with identity lifecycle management, joiner/mover/leaver workflows, access certification, policy automation, connectors, provisioning, and HR system integration.
- Experience designing and supporting CIAM capabilities, including federation, SSO, MFA, authorization, account recovery, and customer profile management.
- Strong understanding of SOX, GDPR, PCI-DSS, identity governance, SoD policies, risk scoring, access modeling, and audit requirements.
- Experience with SailPoint REST APIs, Bean Shell, JSON-based rules, plugin management, custom connector troubleshooting, schema discovery, and provisioning logic.
- Proficiency with SAML, OAuth2, OIDC, and WebAuthN protocols.
- Experience with Jira, Confluence, ServiceNow, ITIL, Lean, and Agile practices.
- Ability to mentor and lead technical teams in complex IAM environments.
- Bachelor’s degree in computer science, information security, or a related field is a bonus.
- IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent are a bonus.
- Experience integrating IAM solutions with AWS or Azure is a bonus.
Benefits
- Team-oriented and flexible work environment with professional development programs and tuition reimbursement.
- Team Member Vehicle Purchase Discount and Toyota Team Member Lease Vehicle Program where applicable.
- Comprehensive health care and wellness plans, tax-advantaged accounts, paid holidays, and paid time off.
- Toyota 401(k) Savings Plan with company matching and an annual retirement contribution where applicable.
- Referral services for prenatal care, adoption, childcare, schools, and related needs.
- Relocation assistance where applicable.
About Toyota USA
Toyota USA (Toyota Motor North America) manufactures and sells Toyota cars, trucks, and SUVs for U.S. customers, and provides financing and mobility services. Founded in 1957 and headquartered in Plano, Texas, it oversees North American operations and plants that build models like the Camry and Tundra, and is expanding battery and EV production in Kentucky and North Carolina.