Identity & Access Management; IAM Operations Engineer, Senior

Overview

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like  one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow.

with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company— delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

IAM Ops Engineer, Senior

Location: Plano, TX

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Who We’re Looking For

We’re seeking a skilled Identity and Access Management (IAM) Engineer to join our Information Security team at Toyota Financial Services. The ideal candidate will have deep hands-on expertise with Okta Workforce Identity—including SSO, MFA, and lifecycle management
—as their primary focus, along with strong experience in Customer Identity and Access Management (CIAM) platforms such as Forge Rock, Okta Customer Identity, or Auth0 as a secondary skill. Experience with Privileged Access Management (PAM) platforms like Cyber Ark or Delinea is a plus.

• Administer and maintain Okta Workforce Identity platform to ensure secure authentication, SSO, MFA, and efficient identity lifecycle management.
• Monitor, troubleshoot, and optimize Okta integrations and workflows, including federated identity setups, API automation, and application onboarding to maintain high availability, performance, and compliance.
• Implement and support federated identity and access models using SAML, OIDC, OAuth2, and WebAuthN protocols for internal and third-party integrations.
• Support and enhance CIAM solutions to deliver secure, scalable customer authentication and authorization experiences aligned with business needs.
• Collaborate with Governance, Incident Response, and Engineering teams to ensure secure and compliant access controls across workforce and customer identity environments.
• Maintain and improve IAM solutions in alignment with governance frameworks such as SOX, GDPR, PCI-DSS, and other relevant compliance standards.
• Lead technical efforts during identity-related security incidents and support incident response activities.
• Drive continuous improvement by staying current with IAM and CIAM trends, technologies, and best practices.

• 4+ years of experience in Identity and Access Management, with a primary focus on Okta Workforce Identity.
• Proven hands-on expertise in Okta Workforce Identity administration, including SSO, MFA, automated lifecycle workflows, and API integrations.
• Strong experience with CIAM platforms such as Forge Rock, Okta Customer Identity, or Auth0, including designing and managing customer authentication flows and identity governance.
• Deep understanding of identity protocols: SAML, OIDC, OAuth2, WebAuthN.
• Experience integrating IAM solutions with Active Directory, Power Shell scripting, and access governance.
• Solid knowledge of compliance frameworks including SOX, GDPR, and PCI-DSS, and aligning IAM processes with audit requirements.
• Experience with ITIL, Lean, and Agile methodologies and tools (Jira, Confluence, Service Now).
• Excellent communication and cross-functional collaboration skills.
• Experience with Just-In-Time (JIT) access, session monitoring, and credential rotation in PAM environments.
• Knowledge of API Access Management, Identity Governance, and Role-Based Access Control (RBAC).

• Bachelor’s degree in computer science, Information Security, or related field.
• IAM certifications (e.g., Okta, ISC2 SSCP, CISSP Associate).
• Experience integrating IAM/CIAM with cloud platforms such as AWS or Azure.

During your interview process,…