Information Security; PAM Engineer

Information Security Engineer PAM – Identity & Access Management

Location:

Plano, TX

Toyota does not offer support or sponsorship of job applicants for employment‑based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration‑related employment (e.g., H‑1B, O‑1, E‑3, H‑1B1, TN, F‑1 OPT, F‑1 STEM OPT, F‑1 CPT, TN, ‘job flexibility benefits’ (also known as I‑140 or Adjustment of Status portability), etc.

now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

We are seeking a highly skilled and motivated Privileged Access Management (PAM) Engineer to join our Information Security Department. This role is pivotal in delivering identity security solutions that enhance the security posture of Toyota Financial Services and our global partners. You will be involved in the design, implementation, and management of Privileged Access Management (PAM) solutions and will collaborate closely with Operations, Governance, and Engineering teams to ensure the secure development, deployment, and optimization of Identity and Access Management (IAM) services.

• Develop and Implement Solutions: Deliver high‑quality, secure Privileged Access Management (PAM) solutions, including enhancements, upgrades, and optimizations to meet evolving business and security needs.
• Technical Leadership: Collaborate with cross‑functional teams (Operations, Governance, Incident Response) to design, implement, and support end‑to‑end identity solutions.
• Security and Compliance: Work with the Governance team to ensure all IAM solutions meet the organization’s risk, security, and compliance requirements, particularly in financial services.
• Roadmap and Strategy Development: Contribute to the creation and execution of multi‑year IAM roadmaps alongside Product Owners, aligning with Toyota’s broader security objectives.
• Agile
  
  Collaboration:
  
  Actively participate in sprint planning and Agile ceremonies, working with teams to ensure IAM deliverables are timely, aligned with business needs, and follow industry best practices.
• Incident Response Support: Provide advanced technical support during security incidents involving IAM or identity‑related breaches, leading rapid response efforts where necessary.
• Business Engagement: Develop a strong understanding of our business processes and objectives, identifying and recommending PAM & Identity solutions that bridge gaps between current and desired security capabilities.
• Continuous Improvement: Stay up to date with the latest industry trends, product updates, and emerging IAM technologies; proactively evaluate and recommend solutions to drive ongoing security improvements.

• 3+ years of hands‑on configuration or development experience with Privileged Access Management platforms such as Centrify, Delinea, Cyber Ark, etc.
• 2+ years of experience in an IAM cyber security domain or equivalent (infrastructure or consulting).
• Proficiency with Active Directory, Power Shell scripting, account provisioning, and access governance concepts.
• Proficiency in IAM system architecture.
• Experience ensuring IAM solutions are compliant with industry standards such as SOX, FIDICA, PCI‑DSS, and other regulatory frameworks, particularly in financial services.
• Proven track record of working in Agile development environments using tools like Jira and Confluence, with experience leading or contributing to sprint planning and ceremonies.
• Demonstrated ability to identify security gaps, propose innovative solutions, and implement them in a fast‑paced, evolving environment.
• Additional qualifications that are a plus:
  • College degree in Computer Science, Information Security, or a related field.
  • PAM vendor certifications or ISC² certifications (CISSP, CCSP, CISM, CISA), or equivalent.
  • Experience with SailPoint.
  • Experience with OKTA.
  • Experience with Crowd Strike or other Identity Threat Protection systems.
  • Experience with in the Financial Services industry.

• A work environment…