Identity & Access Management; IAM Engineer

Overview

Collaborative. Respectful. A place to dream and do. These are words that describe life ota is growing and leading the future of mobility with innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of Toyota, delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create a best-in-class customer experience in an innovative, collaborative environment.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Toyota Financial Services is seeking a motivated and detail-oriented individual to join our Identity and Access Management (IAM) team
.

This role offers a great opportunity to build hands-on experience with identity technologies in a dynamic enterprise environment. We’re looking for a PAM Engineer with strong hands-on experience in Cyber Ark and Centrify
, supported by working knowledge of Okta Workforce Identity as a secondary skill. The ideal candidate will be eager to grow their expertise in privileged access management and identity security, with a focus on operational support, automation, and compliance. The ideal candidate must have hands-on expertise in Privileged Access Management (PAM)—particularly with platforms like Cyber Ark or Delinea
—and proficiency in Okta Workforce Identity
, including SSO and MFA
.

• Perform daily operational support for Cyber Ark and Centrify/Delinea platforms, including onboarding and maintaining privileged accounts and safes
• Managing password rotations, vault health, and policy enforcement
• Monitoring session management services and resolving session failures
• Supporting endpoint privilege elevation and least-privilege configurations
• Support and maintain Cyber Ark and Centrify PAM platforms, including privileged account onboarding, password vaulting, session management, and access controls
• Respond to incidents involving privileged access failures, credential issues, or security alerts
• Assist in the administration of privileged access workflows, including provisioning, deprovisioning, and access reviews
• Support Okta Workforce Identity platform for authentication, SSO, MFA, and user lifecycle management as a secondary responsibility
• Monitor, troubleshoot, and optimize PAM and IAM integrations to ensure secure and seamless access
• Monitor, troubleshoot, and optimize Okta integrations and workflows, including federated identity setups, API-based automation, and application onboarding
• Respond to access-related service requests, incidents, and escalations related to privileged accounts
• Maintain and update documentation for PAM and IAM processes, configurations, and audit controls
• Collaborate with cross-functional teams to support compliance requirements (SOX, GDPR, PCI-DSS) and security best practices
• Participate in continuous improvement initiatives to enhance PAM/IAM tools and processes
• Assist in incident response activities related to privileged access security events
• Stay current with PAM and IAM trends, technologies, and industry best practices

• 3+ years of experience in Privileged Access Management or Identity and Access Management and Workforce Identity Management
• Hands-on experience or strong familiarity with Cyber Ark and Centrify PAM solutions with deep knowledge of credential vaulting, session monitoring, access provisioning, and policy enforcement in enterprise environments
• Strong operational focus on stability, scalability, and compliance, with proven success integrating PAM with ITSM, SIEM, and infrastructure tools
• Good understanding of Active Directory, Power Shell scripting, account provisioning, and access governance
• Understanding of identity protocols such as SAML, OIDC, and OAuth2
• Strong troubleshooting and analytical skills in IAM/PAM environments
• Famil…