IAM Information Systems Engineer – Level 3

• Architect the technical roadmap to migrate all WEX business applications from manual flat files and legacy SailPoint IIQ to cloud-native SailPoint Identity Security Cloud (ISC)
• Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates
• Ensure clean, pre-tested payload packages are handed off to Security Engineering for final SailPoint deployment
• Architect the global Role-Based and Attribute-Based Access Control model
• Map Workday attributes, including WEX Job Role, to technical permission packages in SailPoint for zero-touch birthright provisioning
• Design Agentic AI workflows, including smart-approval engines, account correlation algorithms, and orphan account detection
• Establish enterprise RPA framework standards
• Govern integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC)
• Negotiate with business directors and application owners to secure backlog prioritization
• Deliver multi-year program commitments

• Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership
• Exceptional self-sufficiency and drive; ability to operate in complex, ambiguous environments and convert strategic visions into actionable engineering frameworks
• Master-level ability to navigate complex, multi-track strategic programs under tight deadlines
• Proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units
• Master-level SailPoint (ISC/IIQ)
• SCIM / REST / OAuth 2.0 API gateways
• Agentic AI and RPA strategy
• PowerShell, Python, and Java
• Workday HR integration
• Active Directory architecture