Identity & Access Management (IAM) Engineer, Senior

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the worlds most admired brands Toyota is growing and leading the future of mobility through innovative high-quality solutions designed to enhance lives and delight those we serve. Were looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS) the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity it is an essential part of this world-changing company- delivering on Toyotas vision to move people beyond whats possible. At TFS you will help create best-in-class customer experience in an innovative collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other workauthorization for this role now or in the future. You must have the right to work in the United States and not requireToyota support or sponsorship for immigration-related employment (e.g. H-1B O-1 E-3 H-1B1 TN F-1 OPT F-1 STEM OPT F-1 CPT job flexibility benefits also known as I-140 or Adjustment of Status portability etc.) now or in thefuture. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorshipnow or in the future.

Who we are looking For

Toyota Financial Services (TFS) is seeking a Senior Identity and Access Management (IAM) Engineer to join the SailPoint engineering team within our Information Security organization. This is a hands-on engineering role responsible for designing configuring and managing our Identity Governance and Administration (IGA) solution across SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC). The ideal candidate can hit the ground running on lifecycle management application onboarding migration and troubleshooting and brings a strong foundation in software development and the Software Development Lifecycle (SDLC). Experience with both IIQ and ISC is highly preferred; strong software engineers with hands-on SailPoint experience are also encouraged to apply. This role provides technical direction to our contract engineers and works closely with Business Systems Analysts (BSAs) and Quality Assurance (QA) teams to deliver secure high-quality audit-ready solutions.

What youll be doing

• Own the end-to-end technical design and build of SailPoint solutions ensuring configurations align with IAM architecture approved design patterns and TFS security standards.
• Engineer identity lifecycle management including joiner/mover/leaver (JML) processes birthright access provisioning and deprovisioning and integration with HR authoritative sources.
• Lead application onboarding for connected and disconnected applications including connector configuration aggregation correlation account and entitlement mapping and provisioning policies.
• Build and maintain SailPoint customizations including Bean Shell/Java rules workflows forms and tasks as well as ISC transforms cloud rules and event-triggered workflows.
• Support migration opportunities from SailPoint IIQ to ISC including assessment gap analysis rebuilding IIQ customizations using ISC-native capabilities hybrid coexistence and cutover planning.
• Serve as an escalation point for complex SailPoint issues diagnosing connector aggregation provisioning workflow and performance problems through log analysis and structured root cause analysis.
• Configure and support access requests approvals access certifications roles and separation-of-duties (SoD) policies to meet governance and regulatory requirements (SOX GDPR PCI-DSS).
• Apply SDLC and engineering best practices including version control code review unit testing environment promotion (dev/test/prod) change management and release readiness.
• Provide technical direction to contract engineers by prioritizing and assigning work reviewing configurations and code and holding deliverables to Toyota Financial Service quality and security standards.
• Partner closely with BSAs to translate business access requirements into technical designs and with QA teams to define test scenarios and support SIT UAT and regression testing.
• Create and maintain technical design documents runbooks and knowledge transfer artifacts that turn tribal knowledge into repeatable supportable processes.
• Support identity-related security incidents and drive continuous improvement and automation using SailPoint REST APIs and current platform capabilities.

What you bring

• 5 years of experience in Identity and Access Management or software engineering including 3 years of hands-on engineering experience with SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC).
• Hands-on experience designing and configuring SailPoint IGA capabilities including identity lifecycle management (JML) provisioning access requests and access certifications.
• Proven experience onboarding applications using SailPoint connectors such as Active Directory LDAP JDBC delimited file Web Services/REST and SCIM.
• Strong development foundation in Java and/or Bean Shell with working knowledge of XML JSON SQL and REST APIs.
• Solid understanding of the SDLC and engineering practices including Git or equivalent version control code reviews CI/CD testing and production change control.
• Strong troubleshooting skills across SailPoint applications connectors rules workflows tasks and integrations.
• Understanding of Identity Governance concepts including Role-Based Access Control (RBAC) role modeling SoD access reviews and least privilege.
• Knowledge of compliance frameworks including SOX GDPR and PCI-DSS and experience aligning IAM solutions with audit requirements.
• Experience with Agile methodologies and tools (Jira Confluence ServiceNow).
• Experience providing technical direction or mentorship to engineers including contract or vendor resources.
• Excellent communication and cross-functional collaboration skills including working with BSAs QA application teams and business stakeholders.

Added bonus if you have

• SailPoint certifications (e.g. SailPoint Certified IdentityIQ Engineer SailPoint Certified Identity Security Engineer) or equivalent IAM/security certifications.
• Familiarity with identity protocols such as SAML OAuth2 OIDC and SCIM.
• Experience integrating IAM solutions with cloud platforms such as AWS or Azure.
• Bachelors degree in computer science Information Security or related field.

What well bring
During your interview process our team can fill you in on all the details of our industry-leading benefits and careerdevelopment opportunities. A few highlights include:

• A work environment built on teamwork flexibility and respect
• Professional growth and development programs to help advance your career as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match as well as an annual retirement contribution from Toyotaregardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services adoption childcare schools and more
• Tax Advantaged Accounts (Health Savings Account Health Care FSA Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race ethnicity national origin sex sexual orientation gender identity or expression age disability religion military or veteran status or any other characteristics protected by law.

Have a question need assistance with your application or do you require any special accommodations Please send an email to .

Required Experience:

IC