IAM Information Systems Engineer 3

WEX; São Paulo; On-site; BRL 420,000 - 650,000; Full time

Job summary

WEX seeks a Senior Technical Lead to architect the end-to-end enterprise identity payload pipeline, establish connector factory standards, and drive the multi-year migration to SailPoint Identity Security Cloud (ISC) while aligning executives with the IGA roadmap.

You will define onboarding playbooks, payload schemas, and pre-production exit gates; lead global RBAC/ABAC design and birthright provisioning, and pioneer Agentic AI workflows within enterprise automation and RPA frameworks.

Qualifications

• Experience with advanced IAM architecture and payload pipelines.
• Ability to drive multi-year migration programs and executive alignment.
• Strong stakeholder negotiation and change management skills.

Responsibilities

• Architect IAM roadmap to migrate to SailPoint ISC.
• Define onboarding playbooks and pre-production exit gates.
• Align executives with ISC migration roadmap and ARC initiatives.

Skills

IAM architecture

Payload pipeline

Directory leadership

Stakeholder influence

Tools

PowerShell

Python

Java

SCIM

OAuth

Workday

Job description

Core Mission: Senior technical lead architecting the end-to-end enterprise identity payload pipeline, establishing 'connector factory' sanitization standards and pre-production exit gates, driving the multi-year migration to SailPoint Identity Security Cloud (ISC), and aligning executive stakeholders with WEX's IGA roadmap.

• IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
• 'Connector Factory' Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
• Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
• Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
• ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.

Qualifications, Key Attributes & Technical Stack

• Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
• Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
• Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
• Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.

Technical Stack: Master-level SailPoint (ISC/IIQ), SCIM / REST / OAuth 2.0 API gateways, Agentic AI & RPA strategy, PowerShell/Python/Java, Workday HR integration, and Active Directory architecture.