IAM Information Systems Engineer – Level 3

WEX

. Architect the technical roadmap to migrate all WEX business applications from manual flat files and legacy SailPoint IIQ to cloud-native SailPoint Identity Security Cloud (ISC) .

Posted 10/6/2026full-timeRemote • BrazilMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in advanced IAM architecture and enterprise directory leadership, with a strong focus on SailPoint (ISC/IIQ) and integration strategies. Proven ability to navigate complex programs, drive organizational change, and establish RPA frameworks.

Highest-signal resume keywords

Advanced IAM ArchitectureSailPoint (ISC/IIQ)SCIM / REST / OAuth 2.0PowerShell, Python, and JavaWorkday HR Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAM ArchitecturePayload Pipeline EngineeringRole-Based Access ControlAttribute-Based Access ControlAgentic AI WorkflowsRPA StrategyIntegration StrategyPayload Schema DesignSecurity Engineering HandoffCompliance-by-Design

Soft Skills

Self-SufficiencyNegotiationConsensus BuildingOrganizational Change LeadershipStrategic Vision Execution

Tools & Technologies

SailPoint Identity Security CloudITSM PlatformsAccess Request CentralizationSmart-Approval EnginesAccount Correlation Algorithms

Industry Keywords

Enterprise Directory LeadershipCloud-Native ApplicationsZero-Touch ProvisioningMulti-Track Strategic ProgramsDecentralized Business Units

Tech Stack

Tools & technologies

CloudITSMJavaPythonRPA

About the role

Key responsibilities & impact

Architect the technical roadmap to migrate all WEX business applications from manual flat files and legacy SailPoint IIQ to cloud-native SailPoint Identity Security Cloud (ISC)
Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates
Ensure clean, pre-tested payload packages are handed off to Security Engineering for final SailPoint deployment
Architect the global Role-Based and Attribute-Based Access Control model
Map Workday attributes, including WEX Job Role, to technical permission packages in SailPoint for zero-touch birthright provisioning
Design Agentic AI workflows, including smart-approval engines, account correlation algorithms, and orphan account detection
Establish enterprise RPA framework standards
Govern integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC)
Negotiate with business directors and application owners to secure backlog prioritization
Deliver multi-year program commitments

Requirements

What you’ll need

Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership
Exceptional self-sufficiency and drive; ability to operate in complex, ambiguous environments and convert strategic visions into actionable engineering frameworks
Master-level ability to navigate complex, multi-track strategic programs under tight deadlines
Proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units
Master-level SailPoint (ISC/IIQ)
SCIM / REST / OAuth 2.0 API gateways
Agentic AI and RPA strategy
PowerShell, Python, and Java
Workday HR integration
Active Directory architecture