Identity & Access Management (IAM) Engineer, Lead
Toyota USA2 days ago
Plano, TX, USAStaff+
Responsibilities
- Lead engineering delivery and technical direction for SailPoint IdentityIQ and Identity Security Cloud.
- Provide oversight of SailPoint configuration, integrations, changes, identity profiles, sources, transforms, access profiles, roles, lifecycle states, and workflows.
- Lead technical design reviews and enforce secure configuration, code review, SDLC, release-readiness, and IAM engineering standards.
- Direct contractor and partner engineering resources, review deliverables, and mentor IAM engineers.
- Lead application onboarding for connected and disconnected applications, including connector, Virtual Appliance, and provisioning configuration.
- Oversee access requests, certifications, separation-of-duties capabilities, and governance requirements.
- Serve as the technical escalation point for SailPoint engineering issues and provide guidance during identity-related security incidents.
- Partner with IAM Architecture, Governance, Compliance, Cloud, Application, and IAM Operations teams.
- Identify automation and engineering improvements and stay current with SailPoint and IAM best practices.
Requirements
- 7+ years of hands-on Identity and Access Management experience, including expert-level SailPoint Identity Security Cloud experience.
- Experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
- Experience overseeing a migration from SailPoint IdentityIQ to Identity Security Cloud, including hybrid coexistence models.
- Experience directing contractors, vendors, or systems integrator engineering teams.
- Deep knowledge of identity lifecycle management, access certification, policy automation, and HR system integration.
- Strong experience with Identity Security Cloud transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
- Understanding of role and access modeling, separation-of-duties policies, and risk scoring.
- Proficiency with SAML, OAuth2, OIDC, and SCIM.
- Understanding of security best practices and SOX, GDPR, and PCI-DSS compliance frameworks.
- Experience with Jira, Confluence, and ServiceNow.
- Ability to lead, mentor, and provide direction to engineers across technical and leadership audiences.
- Preferred: SailPoint experience with Bean Shell rules, workflows, application onboarding, and certifications.
- Preferred: SailPoint ISC certification or equivalent IAM/security certifications such as CISSP.
- Preferred: experience integrating IAM solutions with AWS or Azure.
- Preferred: familiarity with Okta, ForgeRock, Okta Customer Identity, or Auth0.
- Preferred: bachelor’s degree in computer science, Information Security, or a related field.
Benefits
- Teamwork-oriented and flexible work environment with professional growth and development programs.
- Tuition reimbursement, team member vehicle purchase discount, and Toyota team member lease vehicle program where applicable.
- Comprehensive health care and wellness plans, paid holidays, and paid time off.
- Toyota 401(k) Savings Plan with company match and annual retirement contribution where applicable.
- Referral services, tax-advantaged accounts, and relocation assistance where applicable.
About Toyota USA
Toyota USA (Toyota Motor North America) manufactures and sells Toyota cars, trucks, and SUVs for U.S. customers, and provides financing and mobility services. Founded in 1957 and headquartered in Plano, Texas, it oversees North American operations and plants that build models like the Camry and Tundra, and is expanding battery and EV production in Kentucky and North Carolina.