Identity & Access Management (IAM) Engineer

Motor Manufacturing, Kentucky, Inc.; Plano (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401(k) Savings Plan

Paid holidays and PTO

Relocation assistance

Job summary

Toyota Financial Services (TFS) seeks an Identity and Access Management (IAM) SailPoint Engineer to join the IAM SailPoint Engineering team within Information Security. This hands-on role configures, integrates, and supports SailPoint IdentityIQ and Identity Security Cloud across IGA and lifecycle management.

You will work with leads and seniors to build depth in identity engineering, onboarding applications via AD/LDAP, JDBC, REST, SCIM, and other sources, while writing rules, transforms, and

Qualifications

• Hands-on IAM experience configuring SailPoint IdentityIQ and Identity Security Cloud.
• Knowledge of Identity Governance and Administration and lifecycle management.
• Experience implementing multiple SailPoint integration types and building rules/workflows.

Responsibilities

• Configure, build, and support SailPoint IIQ/ISC across IAM domains.
• Onboard applications using AD/LDAP, JDBC, REST, SCIM, and file sources; implement policies.
• Collaborate with BSAs and QA to triage requests and support testing and deployment.
• Develop end-to-end changes with documentation and change-management readiness.
• Support platform upgrades, migrations, and troubleshooting alongside senior engineers.

Skills

IAM experience

SailPoint IIQ/ISC

Governance & Lifecycle

Rule/Workflow scripting

SAML/OIDC/OAuth

Agile / Jira / Confluence

Troubleshooting SailPoint

Education

Bachelor’s degree in computer science or related field

Tools

Active Directory/LDAP

JDBC

Web Services/REST

SCIM

BeanShell/Java

JSON

AWS/Azure

Job description

Overview

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world's most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We're looking for talented team members who want to Dream. Do. Grow. with us.

Who we are

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible.

At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM, OPT, F-1 CPT, 'job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we are looking for

Toyota Financial Services (TFS) is seeking an Identity and Access Management (IAM) SailPoint Engineer to join the IAM SailPoint Engineering team within Information Security. This is a hands-on engineering role. You will configure, integrate, and support our SailPoint (IIQ/ISC) platform across Identity Governance and Administration (IGA) and Identity Lifecycle Management. You will work alongside our Lead and Senior Engineers and contribute to the same types of engineering work while you build depth and grow your career in identity engineering.

What you’ll be doing

• Configure, build, and support SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC), including identity profiles, roles, access profiles, certifications, workflows, and lifecycle events (Joiner/Mover/Leaver).
• Onboard applications using multiple integration types, such as Active Directory/LDAP, JDBC, Web Services/REST, SCIM, and delimited file (disconnected) sources, along with the rules, transforms, and provisioning policies they need.
• Partner closely with Business Systems Analysts (BSAs) and QA to triage requests, clarify requirements, troubleshoot defects, and support testing through implementation.
• Complete engineering work end to end and build and unit test changes, document configurations, and get changes ready for deployment through the change management process.
• Support the Lead and Senior Engineers on platform enhancements, upgrades, and migration work, and help other team members with troubleshooting and delivery.
• Make sure SailPoint configurations and integrations meet IAM standards and compliance requirements, including SOX, GDPR, and PCI-DSS.
• Collaborate with partner teams, including IAM Governance, IAM Operations, Incident Response, and application owners, to resolve issues and deliver identity solutions.

What you bring

• 2+ years of IAM experience, including hands-on experience configuring and supporting SailPoint IdentityIQ and/or Identity Security Cloud
• Working knowledge of Identity Governance and Administration and Identity Lifecycle Management, including automated provisioning and deprovisioning, access requests, certifications, and role-based access
• Experience implementing multiple SailPoint integration types (e.g., AD/LDAP, JDBC, Web Services/REST, SCIM, delimited file) and writing or modifying rules, transforms, and workflows (Bean Shell/Java, JSON)
• Familiarity with access protocols:SAML, OAuth, OIDC
• Strong troubleshooting skills across SailPoint connectors, aggregation, provisioning, and target applications
• Knowledge ofSOX, GDPR, PCI-DSS, and alignment of IAM processes with audit requirements
• Experience working in an Agile delivery model using Jira, Confluence, and ServiceNow, including SDLC and changemanagement practices
• Excellent communication and collaboration skills, with a willingness to learn from senior engineers and support teammates

Added bonus if you have

• Bachelor’s degree in computer science, Information Security, or related field
• SailPoint certifications (e.g., IdentityIQ Engineer, Identity Security Cloud Engineer) or other IAM certifications (e.g., ISC2 SSCP)
• Experience integrating IAM withAWS or Azure
• Exposure to Okta, Auth0, or ForgeRock (SSO/MFA/CIAM)

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail].