IAM Information Systems Engineer 2

Core Mission: Senior technical lead architecting the end-to-end enterprise identity payload pipeline, establishing 'connector factory' sanitization standards and pre-production exit gates, driving the multi-year migration to SailPoint Identity Security Cloud (ISC), and aligning executive stakeholders with WEX's IGA roadmap.

IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
'Connector Factory' Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.

Qualifications, Key Attributes & Technical Stack:

Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.

Technical Stack: Master-level SailPoint (ISC/IIQ), SCIM / REST / OAuth 2.0 API gateways, Agentic AI & RPA strategy, PowerShell/Python/Java, Workday HR integration, and Active Directory architecture.

Originally posted on Himalayas

Job Description

IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
'Connector Factory' Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.

Qualifications, Key Attributes & Technical Stack:

Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.

Originally posted on Himalayas

Job Description

IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
'Connector Factory' Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.

Qualifications, Key Attributes & Technical Stack:

Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.

Originally posted on Himalayas

Job Description

IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
'Connector Factory' Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.

Qualifications, Key Attributes & Technical Stack:

Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.

Originally posted on Himalayas