Identity & Access Management (IAM) Engineer, Senior

Toyota Motor Engineering & Manufacturing North America, Inc. Company; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Toyota Financial Services is seeking a Senior IAM Engineer to join the SailPoint team and strengthen our identity governance capabilities. You will design and implement SailPoint IIQ and ISC solutions, aligning with security standards and SDLC practices.

You will lead lifecycle management, onboarding of applications, and work closely with BSAs and QA to deliver secure, auditable IAM processes across our systems.

Qualifications

• 5+ years of experience in Identity and Access Management or software engineering.
• Hands-on experience with SailPoint IIQ and/or ISC IGA capabilities.

Responsibilities

• Own end-to-end design and build of SailPoint solutions aligned with IAM architecture and security standards.
• Engineer identity lifecycle management, including joiner/mover/leaver processes and provisioning.
• Lead application onboarding and connector configuration for IAM integrations.
• Provide technical direction to contract engineers and ensure deliverables meet Toyota standards.
• Collaborate with BSAs and QA to translate business access requirements into technical designs.

Skills

SailPoint IIQ

SailPoint ISC

IAM engineering

Identity governance

SDLC

Identity lifecycle

Tools

BeanShell

Java

REST APIs

Job description

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world's most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We're looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM, OPT, F-1 CPT, 'job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we are looking For

Toyota Financial Services (TFS) is seeking a Senior Identity and Access Management (IAM) Engineer to join the SailPoint engineering team within our Information Security organization. This is a hands-on engineering role responsible for designing, configuring, and managing our Identity Governance and Administration (IGA) solution across SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC). The ideal candidate can hit the ground running on lifecycle management, application onboarding, migration, and troubleshooting, and brings a strong foundation in software development and the Software Development Lifecycle (SDLC). Experience with both IIQ and ISC is highly preferred; strong software engineers with hands-on SailPoint experience are also encouraged to apply. This role provides technical direction to our contract engineers and works closely with Business Systems Analysts (BSAs) and Quality Assurance (QA) teams to deliver secure, high-quality, audit-ready solutions.

What you'll be doing

• Own the end-to-end technical design and build of SailPoint solutions, ensuring configurations align with IAM architecture, approved design patterns, and TFS security standards.
• Engineer identity lifecycle management, including joiner/mover/leaver (JML) processes, birthright access, provisioning and deprovisioning, and integration with HR authoritative sources.
• Lead application onboarding for connected and disconnected applications, including connector configuration, aggregation, correlation, account and entitlement mapping, and provisioning policies.
• Build and maintain SailPoint customizations, including Bean Shell/Java rules, workflows, forms, and tasks, as well as ISC transforms, cloud rules, and event-triggered workflows.
• Support migration opportunities from SailPoint IIQ to ISC, including assessment, gap analysis, rebuilding IIQ customizations using ISC-native capabilities, hybrid coexistence, and cutover planning.
• Serve as an escalation point for complex SailPoint issues, diagnosing connector, aggregation, provisioning, workflow, and performance problems through log analysis and structured root cause analysis.
• Configure and support access requests, approvals, access certifications, roles, and separation-of-duties (SoD) policies to meet governance and regulatory requirements (SOX, GDPR, PCI-DSS).
• Apply SDLC and engineering best practices, including version control, code review, unit testing, environment promotion (dev/test/prod), change management, and release readiness.
• Provide technical direction to contract engineers by prioritizing and assigning work, reviewing configurations and code, and holding deliverables to Toyota Financial Service quality and security standards.
• Partner closely with BSAs to translate business access requirements into technical designs, and with QA teams to define test scenarios and support SIT, UAT, and regression testing.
• Create and maintain technical design documents, runbooks, and knowledge transfer artifacts that turn tribal knowledge into repeatable, supportable processes.
• Support identity-related security incidents and drive continuous improvement and automation using SailPoint REST APIs and current platform capabilities.

What you bring

• 5+ years of experience in Identity and Access Management or software engineering, including 3+ years of hands‑on engineering experience with SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC).
• Hands‑on experience designing and configuring SailPoint IGA capabilities, including identity li