- Location
- Plano, United States of America
- Type
- Full-time
- Department
- Engineering
- Seniority
- Senior
- Experience
- 4+ years
- Education
- Master
- Visa
- Not sponsored
- Source
- Workday
Description
Overview
Who we are
Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.
An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.
IAM Ops Engineer, Senior
Location: Plano, TX
To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.
Who we’re looking for
We’re seeking a skilled Identity and Access Management (IAM) Engineer to join our Information Security team at Toyota Financial Services.
The ideal candidate will have deep hands-on expertise with Okta Workforce Identity—including SSO, MFA, and lifecycle management—as their primary focus, along with strong experience in Customer Identity and Access Management (CIAM) platforms such as ForgeRock, Okta Customer Identity, or Auth0 as a secondary skill. Experience with Privileged Access Management (PAM) platforms like CyberArk or Delinea is a plus.
What you’ll be doing
- Administer and maintain Okta Workforce Identity platform to ensure secure authentication, SSO, MFA, and efficient identity lifecycle management.
- Monitor, troubleshoot, and optimize Okta integrations and workflows, including federated identity setups, API automation, and application onboarding to maintain high availability, performance, and compliance.
- Implement and support federated identity and access models using SAML, OIDC, OAuth2, and WebAuthN protocols for internal and third-party integrations.
- Support and enhance CIAM solutions to deliver secure, scalable customer authentication and authorization experiences aligned with business needs.
- Collaborate with Governance, Incident Response, and Engineering teams to ensure secure and compliant access controls across workforce and customer identity environments.
- Maintain and improve IAM solutions in alignment with governance frameworks such as SOX, GDPR, PCI-DSS, and other relevant compliance standards.
- Lead technical efforts during identity-related security incidents and support incident response activities.
- Drive continuous improvement by staying current with IAM and CIAM trends, technologies, and best practices.
What you bring
- 4+ years of experience in Identity and Access Management, with a primary focus on Okta Workforce Identity.
- Proven hands-on expertise in Okta Workforce Identity administration, including SSO, MFA, automated lifecycle workflows, and API integrations.
- Strong experience with CIAM platforms such as ForgeRock, Okta Customer Identity, or Auth0, including designing and managing customer authentication flows and identity governance.
- Deep understanding of identity protocols: SAML, OIDC, OAuth2, WebAuthN.
- Experience integrating IAM solutions with Active Directory, PowerShell scripting, and access governance.
- Solid knowledge of compliance frameworks including SOX, GDPR, and PCI-DSS, and aligning IAM processes with audit requirements.
- Experience with ITIL, Lean, and Agile methodologies and tools (Jira, Confluence, ServiceNow).
- Excellent communication and cross-functional collaboration skills.
- Experience with Just-In-Time (JIT) access, session monitoring, and credential rotation in PAM environments.
- Knowledge of API Access Management, Identity Governance, and Role-Based Access Control (RBAC).
Added bonus if you have
- Bachelor’s degree in computer science, Information Security, or related field.
- IAM certifications (e.g., Okta, ISC2 SSCP, CISSP Associate).
- Experience integrating IAM/CIAM with cloud platforms such as AWS or Azure.
What we’ll bring
During your interview process, our team will provide detailed information about our industry-leading benefits and career development opportunities. Here are a few highlights:
A work environment built on teamwork, flexibility, and respect.
Professional growth and development programs to help advance your career, including tuition reimbursement.
Team Member Vehicle Purchase Discount.
Toyota Team Member Lease Vehicle Program (if applicable).
Comprehensive health care and wellness plans for your entire family.
Toyota 401(k) Savings Plan with a company match, plus an annual retirement contribution from Toyota regardless of your own contributions.
Paid holidays and paid time off.
Referral services for prenatal services, adoption, childcare, schools, and more.
Tax advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA).
Relocation assistance (if applicable).
Belonging at Toyota
Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Toyota is proud to have 10+ different Business Partnering Groups across 100 different North American chapter locations that support team members’ efforts to dream, do and grow without questioning that they belong.
Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.
Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [email protected].