Identity & Access Management (IAM) Engineer, Lead

Location: Plano, Texas, United States; must already have the right to work in the United States and must not require immigration-related employment sponsorship.

Company

Toyota Financial Services is Toyota and Lexus's finance and insurance business in North America, providing customer-focused financial services within Toyota.

What you will do

• Operate, support, administer, and continuously enhance SailPoint IdentityIQ, Identity Security Cloud, and CIAM platforms including ForgeRock, Okta Customer Identity, and Auth0.
• Perform advanced L3 troubleshooting, maintain IIQ rules, configure application onboarding, and support certifications, remediation, and provisioning operations.
• Collaborate with Governance, Incident Response, Engineering, and Compliance teams to align IAM operations with organizational policies, regulatory requirements, and audit standards.
• Lead technical response to identity-related security incidents and support the integration and operational readiness of other IAM and PAM tools.
• Mentor and coach junior IAM engineers while driving continuous improvement and keeping current with IAM trends and best practices.

Requirements

• 7+ years of hands-on Identity and Access Management experience.
• Expert-level proficiency in SailPoint IdentityIQ and Identity Security Cloud, plus CIAM platforms such as ForgeRock, Okta Customer Identity, and Auth0.
• Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, connector configuration and troubleshooting for AD, HR systems, and SaaS applications, and HR system integration within SailPoint.
• Experience designing, implementing, and supporting CIAM capabilities including customer registration, authentication, authorization, federation, SSO, MFA, account recovery, and customer profile management.
• Strong understanding of SOX, GDPR, and PCI-DSS, with experience aligning IAM operations with audit requirements.
• Experience with ITIL, Lean, and Agile methodologies and Jira, Confluence, and ServiceNow.
• Experience with SailPoint REST APIs, Bean Shell and JSON-based rules, plugin management, custom connector troubleshooting, schema discovery, and provisioning logic.
• Understanding of Identity Governance concepts including SoD policies, risk scoring, and access modeling.
• Proficiency with SAML, OAuth2, OIDC, and WebAuthN, plus the ability to mentor and lead technical teams in complex IAM environments.

Nice to have

• Experience migrating between IIQ and ISC or supporting hybrid coexistence models.
• Experience designing and managing customer identity solutions with Okta and Auth0.
• Bachelor’s degree in computer science, Information Security, or a related field.
• IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent.
• Experience integrating IAM solutions with AWS or Azure.

Culture & Benefits

• Team-oriented, flexible, and respectful work environment.
• Professional growth programs and tuition reimbursement.
• Health care and wellness plans, paid holidays, and paid time off.
• 401(k) plan with company match and an annual retirement contribution where applicable.
• Vehicle purchase and lease programs, referral services, tax-advantaged accounts, and relocation assistance where applicable.