5+ years in Identity and Access Management or software engineering, with 3+ years in SailPoint IIQ and/or ISC.
Hands-on experience with SailPoint IGA capabilities like identity lifecycle management and provisioning.
Proven application onboarding experience using SailPoint connectors (e.g., Active Directory, LDAP).
Strong development skills in Java and/or Bean Shell, with knowledge of XML, JSON, SQL, and REST APIs.
Solid understanding of SDLC and engineering practices, including version control and CI/CD.
Strong troubleshooting skills across SailPoint applications and integrations.
Knowledge of compliance frameworks (SOX, GDPR, PCI-DSS) and aligning IAM solutions with audit requirements.
Responsibilities
Own the technical design and build of SailPoint solutions, ensuring compliance with IAM architecture and security standards.
Engineer identity lifecycle management processes, including joiner/mover/leaver (JML) and provisioning.
Lead application onboarding for connected and disconnected applications, including configuration and mapping.
Build and maintain SailPoint customizations, including workflows and event-triggered processes.
Support migration from SailPoint IIQ to ISC, including gap analysis and cutover planning.
Serve as an escalation point for complex SailPoint issues, conducting root cause analysis.
Configure access requests and certifications to meet governance and regulatory requirements.
Benefits
Teamwork-oriented work environment with flexibility and respect.
Professional growth programs and tuition reimbursement.
Vehicle purchase and lease discounts for team members.
Comprehensive health care and wellness plans for families.
401(k) Savings Plan with company match and annual contributions.
Paid holidays and time off.
Referral services for various family-related needs.
Full Job Description
Overview
Who we are looking For
Toyota Financial Services (TFS) is seeking a Senior Identity and Access Management (IAM) Engineer to join the SailPoint engineering team within our Information Security organization. This is a hands-on engineering role responsible for designing, configuring, and managing our Identity Governance and Administration (IGA) solution across SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC). The ideal candidate can hit the ground running on lifecycle management, application onboarding, migration, and troubleshooting, and brings a strong foundation in software development and the Software Development Lifecycle (SDLC). Experience with both IIQ and ISC is highly preferred; strong software engineers with hands-on SailPoint experience are also encouraged to apply. This role provides technical direction to our contract engineers and works closely with Business Systems Analysts (BSAs) and Quality Assurance (QA) teams to deliver secure, high-quality, audit-ready solutions.
What you'll be doing
Own the end-to-end technical design and build of SailPoint solutions, ensuring configurations align with IAM architecture, approved design patterns, and TFS security standards.
Engineer identity lifecycle management, including joiner/mover/leaver (JML) processes, birthright access, provisioning and deprovisioning, and integration with HR authoritative sources.
Lead application onboarding for connected and disconnected applications, including connector configuration, aggregation, correlation, account and entitlement mapping, and provisioning policies.
Build and maintain SailPoint customizations, including Bean Shell/Java rules, workflows, forms, and tasks, as well as ISC transforms, cloud rules, and event-triggered workflows.
Support migration opportunities from SailPoint IIQ to ISC, including assessment, gap analysis, rebuilding IIQ customizations using ISC-native capabilities, hybrid coexistence, and cutover planning.
Serve as an escalation point for complex SailPoint issues, diagnosing connector, aggregation, provisioning, workflow, and performance problems through log analysis and structured root cause analysis.
Configure and support access requests, approvals, access certifications, roles, and separation-of-duties (SoD) policies to meet governance and regulatory requirements (SOX, GDPR, PCI-DSS).
Apply SDLC and engineering best practices, including version control, code review, unit testing, environment promotion (dev/test/prod), change management, and release readiness.
Provide technical direction to contract engineers by prioritizing and assigning work, reviewing configurations and code, and holding deliverables to Toyota Financial Service quality and security standards.
Partner closely with BSAs to translate business access requirements into technical designs, and with QA teams to define test scenarios and support SIT, UAT, and regression testing.
Create and maintain technical design documents, runbooks, and knowledge transfer artifacts that turn tribal knowledge into repeatable, supportable processes.
Support identity-related security incidents and drive continuous improvement and automation using SailPoint REST APIs and current platform capabilities.
What you bring
5+ years of experience in Identity and Access Management or software engineering, including 3+ years of hands-on engineering experience with SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC).
Hands-on experience designing and configuring SailPoint IGA capabilities, including identity lifecycle management (JML), provisioning, access requests, and access certifications.
Proven experience onboarding applications using SailPoint connectors such as Active Directory, LDAP, JDBC, delimited file, Web Services/REST, and SCIM.
Strong development foundation in Java and/or Bean Shell, with working knowledge of XML, JSON, SQL, and REST APIs.
Solid understanding of the SDLC and engineering practices, including Git or equivalent version control, code reviews, CI/CD, testing, and production change control.
Strong troubleshooting skills across SailPoint applications, connectors, rules, workflows, tasks, and integrations.
Understanding of Identity Governance concepts, including Role-Based Access Control (RBAC), role modeling, SoD, access reviews, and least privilege.
Knowledge of compliance frameworks including SOX, GDPR, and PCI-DSS, and experience aligning IAM solutions with audit requirements.
Experience with Agile methodologies and tools (Jira, Confluence, ServiceNow).
Experience providing technical direction or mentorship to engineers, including contract or vendor resources.
Excellent communication and cross-functional collaboration skills, including working with BSAs, QA, application teams, and business stakeholders.
Familiarity with identity protocols such as SAML, OAuth2, OIDC, and SCIM.
Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
Bachelor's degree in computer science, Information Security, or related field.
What we'll bring During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:
A work environment built on teamwork, flexibility, and respect
Professional growth and development programs to help advance your career, as well as tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program (if applicable)
Comprehensive health care and wellness plans for your entire family
Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools and more
Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
Relocation assistance (if applicable)
About Toyota
Toyota Motor Corporation is a Japanese multinational automotive manufacturer headquartered in Toyota City, Aichi, Japan. The company was founded in 1937 by Kiichiro Toyoda and has since grown to become the world's largest automotive manufacturer. Toyota Motor Corporation produces a wide range of vehicles including cars, trucks, and buses. The company is committed to sustainability and has set a goal of achieving zero carbon emissions by 2050. Toyota Motor Corporation has operations in over 170 countries and regions around the world.
