Sr Manager, Identity Operations & Engineering

WEX is undertaking a strategic modernization of its identity lifecycle and governance capabilities. The Sr Manager, Identity Operations & Engineering will own enterprise IAM processes and outcomes, lead IAM operations and engineering teams, oversee SailPoint ISC migration and integrations, and drive provisioning automation, access governance, and RBAC/ABAC prioritization.

Responsibilities:

• Act as the primary Process Owner and single accountable leader for WEX’s Joiner, Mover, and Leaver (JML) identity lifecycle outcomes
• Co-host WEX's IAM Governance Council alongside a designated leader from Information Security to drive policy reviews, prioritize the enterprise IAM backlog, and align on risk reduction
• Define the business and technical requirements for automated lifecycle workflows, such as establishing "Birthright" access tied to Workday attributes and event-triggered Mover processes
• Act as the primary Process Owner and single accountable leader for WEX’s IAM engineering and provisioning outcomes, breaking down silos between Security Engineering, Tech Operations, and Infrastructure
• Operationalize WEX's IAM Governance Council to drive policy reviews, continuous improvement cycles, and establish measurable KPIs/KRIs (e.g., provisioning SLAs, MTTR for terminations, automated coverage)
• Lead and develop a blended group consisting of an IAM Operations team and an IAM Engineering team (including Active Directory engineers)
• Establish a seamless, continuous partnership with the Information Security SailPoint Administration/Configuration team, handing off fully tested integration data and guiding their platform configurations to meet your team's operational requirements
• Support the architectural migration from legacy on-premise SailPoint IdentityIQ (IIQ) to the SailPoint Identity Security Cloud (ISC) SaaS platform
• Centralize all access requests natively within SailPoint ISC, decommissioning the legacy Employee Service Portal (ESP/JSM) for IAM requests and eliminating manual fulfillment routing
• Transition WEX from delayed termination batch-syncs to event-driven termination processing, ensuring immediate, end-to-end access revocation across all target systems upon employee separation
• Ensure all engineering, integration, and operational work fully adheres to established ITSM/ITIL standards
• Foster a culture of continuous improvement, automation, and toil reduction across all identity processes, leveraging metrics to optimize system performance and reduce manual administrative overhead
• Oversee the health, security, and lifecycle management of enterprise directory services, ensuring high availability and robust integration with SailPoint for unified identity governance
• Define architectural standards for directory services, focusing on modernizing infrastructure, optimizing group policy management, and streamlining authentication protocols to support a zero-trust environment
• Serve as the primary technical liaison to Application Owners, driving the campaign to onboard hundreds of disconnected WEX applications into the SailPoint ISC ecosystem
• Define the application onboarding framework, establishing a tiered, risk-based prioritization backlog
• Partner with application teams to design, extract, and standardize identity data payloads, ensuring identities correlate accurately to Global Workday IDs (WIDs)
• Oversee the "connector factory" preparation process: Your engineering team will build integration data maps, perform payload sanitization, and conduct pre-production testing before formally passing the validated package to InfoSec for configuration
• Transform daily identity operations by centralizing all access requests natively within SailPoint, decommissioning legacy manual routing, and transitioning WEX from delayed batch-syncs to event-driven termination processing
• Drive continuous toil reduction by replacing the high volume of manual service desk tickets with automated, API-driven provisioning workflows
• Experience designing and implementing access control frameworks (RBAC, ABAC, or hybrid models) to support least-privilege security architectures
• Make ABAC/RBAC a top organizational priority by partnering with business leaders to develop a mature, scalable role model
• Drive a massive entitlement rationalization exercise across WEX's ~10,600 entitlements to establish a clean, business-friendly self-service request catalog
• Design roles that enforce Segregation of Duties (SoD) boundaries so toxic combinations cannot exist within a single role definition, utilizing critical thinking to balance security with operational efficiency
• Decommission external spreadsheet-based role tracking by consolidating all role definitions and ownership assignments directly into SailPoint
• Experience designing and implementing access control frameworks (RBAC, ABAC, or hybrid models) to support least-privilege security architectures
• Make ABAC/RBAC a top organizational priority by partnering with business leaders to develop a mature, scalable role model
• Drive a massive entitlement rationalization exercise across WEX's ~10,600 entitlements to establish a clean, business-friendly self-service request catalog
• Design roles that enforce Segregation of Duties (SoD) boundaries so toxic combinations cannot exist within a single role definition, utilizing critical thinking to balance security with operational efficiency
• Decommission external spreadsheet-based role tracking by consolidating all role definitions and ownership assignments directly into SailPoint

Requirements:

• We are seeking a critical thinker with a strategic mindset to serve as the enterprise "Process Owner" for WEX's identity lifecycle
• You must have a demonstrated history of success in managing complex identity programs and translating technical IAM concepts into tangible business value
• • Lead and develop a blended group consisting of an IAM Operations team and an IAM Engineering team (including Active Directory engineers)
• • Ensure all engineering, integration, and operational work fully adheres to established ITSM/ITIL standards.
• • Experience designing and implementing access control frameworks (RBAC, ABAC, or hybrid models) to support least-privilege security architectures
• • Experience: 7+ years of technical leadership experience in Identity and Access Management, specifically operating as a Product Owner, Solutions Architect, or Operations/Engineering Manager
• Demonstrated history of success in executing enterprise-level IAM transformations
• • Technical Expertise: Strong architectural understanding of SailPoint Identity Security Cloud (ISC) data models, API/SCIM integrations, Active Directory (AD), Workday (as an authoritative HR source), and enterprise ITSM platforms
• • Training & Certifications: Relevant industry certifications are required to demonstrate a formal understanding of identity frameworks and IT service management (e.g., Certified Identity and Access Manager (CIAM), CISSP, CISM, ITIL v4 Foundation/Strategic Leader, or SailPoint-specific certifications)
• • ITSM/ITIL & Continuous Improvement: Deep understanding of ITSM/ITIL frameworks with a proven track record of applying observability and toil reduction principles to operational workflows
• • Stakeholder Management: Exceptional strategic mindset with the ability to co-lead governance committees, partner with decentralized application owners, and effectively collaborate with Information Security administration teams to execute shared goals