Skip to content

Open nowPosted yesterday

Identity & Access Management (IAM) Engineer, Lead

Toyota North America114 open roles

Where
Plano, Texas
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity & Access Management (IAM) Engineer, LeadToyota North America · Plano, Texas
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Toyota North America's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Toyota North America postings stay open a median of 14 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted yesterday

Toyota North America median: 14 days open

The posting

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM, OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we are looking for

Toyota Financial Services (TFS) is seeking an experienced Lead Identity and Access Management (IAM) Engineer to join our Information Security team. This role sets the technical direction for our SailPoint identity governance platform. The ideal candidate will be a subject matter expert in both SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC), and a technical leader who provides design oversight, ensures solutions are sound and aligned with TFS security standards and best practices, leads contractor and partner engineering teams, and provides direction to IAM engineers across the team.

What you’ll be doing

Lead engineering delivery for SailPoint Identity (IIQ) and Identity Security Cloud (ISC), ensuring solutions are built in alignment with established IAM architecture and design patterns, TFS security standards, and best practices.

  • Provide technical oversight of both SailPoint IIQ and ISC environments, including configuration, integrations, and changes across both platforms.
  • Lead technical reviews of engineering work, including identity profiles, sources, transforms, access profiles, roles, lifecycle states, and workflows, to ensure builds follow approved design patterns.
  • Lead and oversee contractor and partner engineering resources, setting expectations, reviewing deliverables, and holding work to TFS quality and security standards.
  • Provide technical direction, prioritization, and mentorship to IAM engineers, reviewing their configurations and code and building team capability in ISC.
  • Enforce engineering standards, including code review, secure configuration, SDLC, and release readiness for SailPoint changes, in alignment with design patterns established by IAM Architecture.
  • Lead application onboarding execution for connected and disconnected applications, including connector, Virtual Appliance, and provisioning configuration.
  • Oversee the implementation of access request, certification, and separation-of-duties (SoD) capabilities to meet governance and regulatory requirements (SOX, GDPR, PCI-DSS).
  • Serve as the technical escalation point for complex SailPoint configuration and engineering issues, and provide expert guidance during identity-related security incidents.
  • Partner with IAM Architecture, Governance, Compliance, Cloud, Application, and IAM Operations teams to ensure engineering work aligns with approved designs, business needs, policy, and audit readiness.
  • Identify engineering improvements and automation opportunities, staying current with SailPoint capabilities and IAM best practices to drive continuous improvement.

What you bring

  • 7+ years of hands-on experience in Identity and Access Management, including expert-level engineering experience with SailPoint Identity Security Cloud (ISC).
  • Proven experience leading technical design and architecture for enterprise identity governance solutions, including design review and approval.
  • Experience leading or providing technical oversight of a migration from SailPoint IIQ to ISC, including hybrid coexistence models.
  • Experience directing contractors, vendors, or systems integrator engineering teams and holding deliverables to defined quality and security standards.
  • Deep expertise in identity lifecycle management, including joiner/mover/leaver workflows, access certification, policy automation, and HR system integration.
  • Strong experience with ISC configuration, including transforms, cloud rules, workflows, connectors, Virtual Appliances, and SailPoint REST APIs.
  • Strong understanding of Identity Governance concepts, such as role and access modeling, SoD policies, and risk scoring.
  • Proficient in identity and access protocols including SAML, OAuth2, OIDC, and SCIM.
  • Strong understanding of security best practices and compliance frameworks (SOX, GDPR, PCI-DSS), with experience translating them into engineering standards.
  • Experience with Agile and SDLC practices and tools (Jira, Confluence, ServiceNow).
  • Proven ability to lead, mentor, and provide direction to engineers in complex IAM environments, with strong communication skills across technical and leadership audiences.

Added bonus if you have

  • Hands-on SailPoint experience, including Bean Shell rules, workflows, application onboarding, and certifications.
  • SailPoint ISC certification or equivalent IAM/security certifications (e.g., CISSP).
  • Experience integrating IAM solutions with cloud platforms like AWS or Azure.
  • Familiarity with Okta or CIAM platforms such as ForgeRock, Okta Customer Identity, or Auth0.
  • Bachelor’s degree in computer science, Information Security, or related field.

What we’ll bring During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

  • A work environment built on teamwork, flexibility, and respect
  • Professional growth and development programs to help advance your career, as well as tuition reimbursement
  • Team Member Vehicle Purchase Discount
  • Toyota Team Member Lease Vehicle Program (if applicable)
  • Comprehensive health care and wellness plans for your entire family
  • Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
  • Paid holidays and paid time off
  • Referral services related to prenatal services, adoption, childcare, schools and more
  • Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
  • Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Toyota North America's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Toyota North America's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Toyota North America's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.