OverviewWho we are looking forToyota Financial Services (TFS) is seeking an experienced
Lead Identity and Access Management (IAM) Operations Engineer to join our Information Security team at Toyota Financial Services. The ideal candidate will be a subject matter expert in both
SailPoint Identity IQ (IIQ) / Identity Security Cloud (ISC) and
Customer Identity and Access Management (CIAM) platforms, including solutions such as
ForgeRock, Okta Customer Identity, or Auth0.This role requires a technical expert who can drive IAM operations, mentor junior engineers, and collaborate across teams to ensure secure, complaint, and efficient identity Operations.
What you'll be doingManage the operation, support, and continuous enhancement of
SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), and CIAM platforms (ForgeRock, Okta Customer Identity, Auth0), including advanced L3 troubleshooting and platform administration.
- Collaborate closely with Governance, Incident Response, Engineering, and Compliance teams to align IAM operations with organizational policies and regulatory requirements (SOX, GDPR, PCI-DSS).
- Operate and support Okta/Auth0 CIAM platforms as secondary responsibilities, ensuring secure and scalable customer identity solutions.
- Lead technical efforts during identity-related security incidents, providing expert guidance and resolution.
- Maintain and support IIQ Rules (e.g., Before/After Provisioning Rules, Correlation Rules, Custom Workflows).
- Maintain IIQ application onboarding configurations, including schema updates, attribute mappings, and provisioning policies.
- Support IIQ Certifications, including campaign setup, execution, monitoring, and remediation.
- Mentor and coach junior IAM engineers, fostering knowledge sharing and skill development within the team.
- Drive continuous improvement initiatives by staying current with IAM trends, emerging technologies, and best practices.
- Support integration and operational readiness of other IAM tools and PAM solutions as needed.
- Ensure IAM processes and solutions meet audit readiness and compliance standards.
What you bring- 7+ years of hands-on experience in Identity and Access Management, with expert-level proficiency in SailPoint IdentityIQ (IIQ) and ISC Customer Identity and Access Management (CIAM) platforms such as ForgeRock, Okta Customer Identity, and Auth0.
- Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, Connector configuration and troubleshooting (AD, HR systems, SaaS apps) and HR system integration within SailPoint.
- Strong experience designing, implementing, and supporting CIAM capabilities, including customer registration, authentication, authorization, federation, SSO, MFA, account recovery, and customer profile management.
- Strong understanding of compliance frameworks (SOX, GDPR, PCI-DSS) and experience aligning IAM operations with audit requirements.
- Experience with ITIL, Lean, and Agile methodologies and tools (Jira, Confluence, ServiceNow).
- Experience with migration between IIQ and ISC or hybrid coexistence models (a major plus).
- Experience with SailPoint REST APIs for automation and operational tooling.
- Ability to write or troubleshoot Bean Shell (IIQ) and JSON-based rules (ISC).
- Familiarity with SailPoint plugin management, including installation, configuration, and troubleshooting.
- Experience with custom connector troubleshooting, including schema discovery and provisioning logic.
- Understanding of Identity Governance concepts, such as SoD policies, risk scoring, and access modeling.
- Familiar with CIAM platforms such as Okta and Auth0, with experience designing and managing customer identity solutions is a plus.
- Proficient in identity and access protocols including SAML, OAuth2, OIDC, and WebAuthN.
- Proven ability to mentor and lead technical teams in complex IAM environments.
Added bonus if you have - Bachelor's degree in computer science, Information Security, or related field.
- IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent.
- Experience integrating IAM solutions with cloud platforms like AWS or Azure.
What we'll bringDuring your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:
- A work environment built on teamwork, flexibility, and respect
- Professional growth and development programs to help advance your career, as well as tuition reimbursement
- Team Member Vehicle Purchase Discount
- Toyota Team Member Lease Vehicle Program (if applicable)
- Comprehensive health care and wellness plans for your entire family
- Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
- Paid holidays and paid time off
- Referral services related to prenatal services, adoption, childcare, schools and more
- Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
- Relocation assistance (if applicable)
