Identity & Access Management (IAM) Engineer, Lead

TCC Toyota Motor Credit Corporation Company; Plano (TX); Sur place; USD 130 000 - 180 000; Plein temps

Avantages offerts par ce poste

Health care and wellness plans

401(k) matching program

Paid holidays and time off

Relocation assistance (if applicable)

Team Member Vehicle Discount

Résumé du poste

Toyota Financial Services in Plano, TX, seeks an experienced Lead IAM Operations Engineer to join our Information Security team. The role focuses on SailPoint IIQ/ISC and CIAM platforms (ForgeRock, Okta, Auth0) to deliver secure, scalable identity services.

You will mentor engineers, collaborate across Governance, Incident Response and Compliance, and drive improvements in IAM operations while ensuring SOX, GDPR and PCI-DSS alignment and cloud integrations with AWS/Azure.

Qualifications

• 7+ years of hands-on IAM experience with IIQ/ISC and CIAM platforms.
• Proficient in identity lifecycle management and IAM automation.
• Experience with CIAM like Okta/Auth0 and SSO/MFA.
• Knowledge of SOX, GDPR, PCI-DSS compliance.
• Experience with cloud integrations (AWS/Azure).

Responsabilités

• Operate SailPoint IIQ/ISC platforms with advanced troubleshooting.
• Collaborate with Governance, Incident Response, Engineering and Compliance.
• Manage Okta/Auth0 CIAM platforms as secondary responsibilities.
• Lead IAM incident response efforts and provide expert guidance.
• Maintain IIQ Rules and onboarding configurations.
• Support IIQ Certifications and remediation.
• Mentor junior IAM engineers and foster knowledge sharing.
• Drive IAM improvements and stay current with trends.
• Support integration of other IAM tools and PAM as needed.
• Ensure audit readiness and regulatory compliance.

Connaissances

SailPoint IIQ

IdentityIQ/ISC

CIAM platforms (ForgeRock, Okta, Auth0

Identity lifecycle management

OAuth2/OIDC/SAML

SOX/GDPR/PCI-DSS compliance

ITIL/Lean/Agile

Jira/Confluence

ServiceNow

Cloud integrations (AWS/Azure)

Mentoring/leadership

Formation

Bachelor’s degree in computer science or related field

Outils

Jira

Confluence

ServiceNow

Cloud platforms (AWS/Azure)

Description du poste

Overview Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM, OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we are looking for

Toyota Financial Services (TFS) is seeking an experienced Lead Identity and Access Management (IAM) Operations Engineer to join our Information Security team at Toyota Financial Services. The ideal candidate will be a subject matter expert in both SailPoint Identity IQ (IIQ) / Identity Security Cloud (ISC) and Customer Identity and Access Management (CIAM) platforms, including solutions such as ForgeRock, Okta Customer Identity, or Auth0. This role requires a technical expert who can drive IAM operations, mentor junior engineers, and collaborate across teams to ensure secure, complaint, and efficient identity Operations.

What you’ll be doing

• Manage the operation, support, and continuous enhancement of SailPoint IdentityIQ (IIQ), Identity Security Cloud (ISC), and CIAM platforms (ForgeRock, Okta Customer Identity, Auth0), including advanced L3 troubleshooting and platform administration.
• Collaborate closely with Governance, Incident Response, Engineering, and Compliance teams to align IAM operations with organizational policies and regulatory requirements (SOX, GDPR, PCI-DSS).
• Operate and support Okta/Auth0 CIAM platforms as secondary responsibilities, ensuring secure and scalable customer identity solutions.
• Lead technical efforts during identity-related security incidents, providing expert guidance and resolution.
• Maintain and support IIQ Rules (e.g., Before/After Provisioning Rules, Correlation Rules, Custom Workflows).
• Maintain IIQ application onboarding configurations, including schema updates, attribute mappings, and provisioning policies.
• Support IIQ Certifications, including campaign setup, execution, monitoring, and remediation.
• Mentor and coach junior IAM engineers, fostering knowledge sharing and skill development within the team.
• Drive continuous improvement initiatives by staying current with IAM trends, emerging technologies, and best practices.
• Support integration and operational readiness of other IAM tools and PAM solutions as needed.
• Ensure IAM processes and solutions meet audit readiness and compliance standards.

What you bring

• 7+ years of hands‑on experience in Identity and Access Management, with expert‑level proficiency in SailPoint IdentityIQ (IIQ) and ISC Customer Identity and Access Management (CIAM) platforms such as ForgeRock, Okta Customer Identity, and Auth0.
• Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, Connector configuration and troubleshooting (AD, HR systems, SaaS apps) and HR system integration within SailPoint.
• Strong experience designing, implementing, and supporting CIAM capabilities, including customer registration, authentication, authorization, federation, SSO, MFA, account recovery, and customer profile management.
• Strong understanding of compliance frameworks (SOX, GDPR, PCI-DSS) and experience aligning IAM operations with audit requirements.
• Experience with ITIL, Lean, and Agile methodologies and tools (Jira, Confluence, ServiceNow).
• Experience with migration between IIQ and ISC or hybrid coexistence models (a major plus).
• Experience with SailPoint REST APIs for automation and operational tooling.
• Ability to write or troubleshoot Bean Shell (IIQ) and JSON‑based rules (ISC).
• Familiarity with SailPoint plugin management, including installation, configuration, and troubleshooting.
• Experience with custom connector troubleshooting, including schema discovery and provisioning logic.
• Understanding of Identity Governance concepts, such as SoD policies, risk scoring, and access modeling.
• Familiar with CIAM platforms such as Okta and Auth0, with experience designing and managing customer identity solutions is a plus.
• Proficient in identity and access protocols including SAML, OAuth2, OIDC, and WebAuthN.
• Proven ability to mentor and lead technical teams in complex IAM environments.
• Added bonus if you have Bachelor’s degree in computer science, Information Security, or related field.
• IAM certifications such as SailPoint, ISC2 SSCP, CISSP Associate, or equivalent.
• Experience integrating IAM solutions with cloud platforms like AWS or Azure.

What we’ll bring

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail].

At Toyota, we don’t just have a vision, but a group of talented, dedicated people who work hard every day to turn that vision into reality. Our mission is to build a future where everyone has the freedom to move. We believe that nothing is impossible. We have big dreams and persevere through any obstacles. We work together to create the future of mobility and make the world a better place.

Career Possibilities: Toyota is a place for people who dream big and are determined to make those dreams a reality. We encourage innovation and look for people who will challenge the status quo in order to make the world a better place. We thrive on teamwork and collaboration and know diverse backgrounds, experiences and perspectives are not only the right thing for our people, they are a business imperative. Together, we’re empowered to forge our own paths — to be agile, curious and embrace a growth mindset and immerse ourselves in situations to gain new perspectives and to inspire bold, innovative ways of thinking and working. Our success as a company is directly tied to our team members’ success, and our collective ability to give back to society through an unwavering commitment to delight our customers and make people’s lives better. If you want to be part of the next‑generation of innovations that help keep the world moving, then join us. And let’s start our impossible, together.