Identity & Access Management Engineer, Lead

Responsibilities

• Lead engineering delivery and technical oversight for SailPoint IdentityIQ and Identity Security Cloud environments.
• Review identity profiles, sources, transforms, access profiles, roles, lifecycle states, workflows, configurations, and code against approved design patterns.
• Direct contractor and partner engineering resources, review deliverables, and maintain quality and security standards.
• Provide technical direction, prioritization, mentorship, and escalation support to IAM engineers.
• Lead application onboarding for connected and disconnected applications, including connector, Virtual Appliance, and provisioning configuration.
• Oversee access request, certification, and separation-of-duties capabilities supporting governance and regulatory requirements.
• Partner with architecture, governance, compliance, cloud, application, and IAM operations teams on designs, policies, business needs, and audit readiness.
• Identify automation and engineering improvements and maintain current knowledge of SailPoint and IAM best practices.

Requirements

• 7+ years of hands-on Identity and Access Management experience, including expert-level SailPoint Identity Security Cloud engineering.
• Experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
• Experience overseeing a migration from SailPoint IdentityIQ to Identity Security Cloud, including hybrid coexistence models.
• Experience directing contractors, vendors, or systems integrator engineering teams.
• Deep expertise in identity lifecycle management, access certification, policy automation, and HR system integration.
• Strong experience with Identity Security Cloud transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
• Understanding of identity governance, role and access modeling, separation-of-duties policies, and risk scoring.
• Proficiency with SAML, OAuth2, OIDC, and SCIM.
• Understanding of security best practices and SOX, GDPR, and PCI-DSS compliance frameworks.
• Experience with Agile and SDLC practices and Jira, Confluence, and ServiceNow.
• Ability to lead, mentor, and communicate direction to engineers and technical and leadership audiences.
• Preferred qualifications include SailPoint Bean Shell rules, SailPoint or IAM/security certifications such as CISSP, AWS or Azure integration experience, Okta or CIAM experience with ForgeRock, Okta Customer Identity, or Auth0, and a bachelor's degree in computer science, information security, or a related field.

Benefits

• Team-oriented, flexible, and respectful work environment.
• Professional growth and development programs and tuition reimbursement.
• Team Member Vehicle Purchase Discount and, if applicable, Toyota Team Member Lease Vehicle Program.
• Comprehensive health care and wellness plans.
• Toyota 401(k) Savings Plan with company match and, if applicable, annual employer retirement contribution.
• Paid holidays and paid time off.
• Referral services for prenatal services, adoption, childcare, schools, and related needs.
• Health Savings Account, Health Care FSA, and Dependent Care FSA.
• Relocation assistance, if applicable.