IAM Information Systems Engineer 2

WEX Inc.; Brasil; Remote; BRL 180,000 - 320,000; Full time

Job summary

WEX Inc. is seeking an IAM Payload Engineer to autonomously build automated data pipelines (PowerShell, Python, SQL) for SailPoint onboarding and transformation. You will migrate and sanitize application accounts and entitlements, aligning with SCIM, REST, or JDBC payloads for ingestion.

You will partner with application teams to resolve data quality issues, implement RBAC/ABAC models in SailPoint, automate manual processes with RPA, and advocate for SOX/SOD compliance across sprint cycles.

Qualifications

• Experience in IAM engineering, payload integration, or directory automation.
• Self-sufficient, autonomous problem solver who owns onboarding pipelines from discovery to production validation.

Responsibilities

• Develop and maintain data-transformation scripts (PowerShell, Python, SQL) for standardized payloads.
• Collaborate with application teams to fix data quality issues and achieve 100% Workday WID correlation.
• Analyze sanitized payloads to build RBAC/ABAC models in SailPoint and replace static entitlements with role bundles.
• Automate manual processes with REST API integrations and RPA bots to enable self-service workflows.
• Educate stakeholders on SOX/SOC rules and SoD risks to ensure compliance.

Skills

IAM engineering

payload integration

directory automation

stakeholder influence

Tools

SailPoint

UiPath

Power Automate

PowerShell

Python

SQL

REST/SCIM APIs

Active Directory/Entra ID

Job description

Core Mission:

The engineering workhorse who autonomously builds automated payload extraction and transformation pipelines (PowerShell, Python, SQL) to migrate business applications into SailPoint IGA, influencing business Application Owners and managing multiple integration tracks concurrently.

Key Responsibilities & Deliverables:

• Payload Engineering & Sanitization ('Connector Factory'): Develop and maintain PowerShell, Python, and SQL data-transformation scripts that extract, clean, and format messy application account/entitlement data into standardized SCIM, REST API, or JDBC payload packages for SailPoint ingestion.
• Application Payload Migration: Partner directly with decentralized business application teams to resolve data quality issues, eliminate non-standard local User IDs, and achieve 100% Workday WID account correlation prior to platform configuration.
• RBAC / ABAC Role Construction: Analyze sanitized entitlement payloads to build structured Role-Based and Attribute-Based Access Control models in SailPoint, replacing unmanaged static entitlements with business-friendly role bundles.
• Toil Elimination & Automation: Deploy PowerShell/Python scripts, REST API integrations, and RPA (Robotic Process Automation) bots to replace manual ticket-driven administrative processes with automated self-service workflows.
• Compliance Alignment & Stakeholder Influence: Act as a compliance ambassador; educate application owners on SOX/SOC rules, Segregation of Duties (SoD) risks, and audit evidence standards to secure cooperation and meet sprint integration deadlines.

Qualifications, Key Attributes & Technical Stack:

• Experience: Experience in IAM engineering, payload integration, or directory automation.
• Self-Sufficiency & Autonomy: Highly self-directed problem solver who takes full ownership of application onboarding pipelines from discovery to production validation with minimal supervision.
• Multi-Tasking & Agility: Proven capability to manage and juggle multiple parallel application onboarding streams 3-5 apps concurrently, script development tasks, and operational escalations simultaneously in a high-velocity environment.
• Stakeholder Partnership & Influence: Strong collaborative partnership skills; ability to influence non-technical Application Owners to prioritize data sanitization, resolve correlation blockers, and meet sprint commitments.
• Technical Stack: Advanced PowerShell, Python, SQL, REST/SCIM APIs, RPA (UiPath / Power Automate), SailPoint (IIQ or ISC), Active Directory/Entra ID, and ITSM frameworks.

WEX is a global commerce platform that helps businesses solve for operational complexities like employee benefits, managing and mobilizing fleets, and streamlining payments. With over 6,500 employees, we work with large and small companies in more than 200 countries and territories, and can tailor our services to meet the unique needs of their businesses. We hire people who share our passion for continuous innovation and client service that is unparalleled in the industry. Offering comprehensive and market competitive benefits, our offerings are designed to support your personal and professional well-being. If you’re looking for a growing career - come be part of WEX today.

WEX is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, sexual orientation, gender identity, protected veteran status, disability or other protected status.

WEX promotes a drug-free workplace. Qualified individuals with a disability have the right to request a reasonable accommodation. If you require a reasonable accommodation as a result of your disability at any point in the job application process, please submit your request through our Reasonable Accommodation Request Form. This form is for accommodation requests only and cannot be used to inquire about the status of applications.