LocationBrazil - Remote; Brazil Sao Paulo - Remote
Work moderemote
SeniorityLead
Company size5,001–10,000 people
First seenOct 7, 2026 · 4d ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Must have10
Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership
Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments
Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines
High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units
Master-level SailPoint (ISC/IIQ)
SCIM / REST / OAuth 2.0 API gateways
Agentic AI & RPA strategy
PowerShell/Python/Java
Workday HR integration
Active Directory architecture
Skills
SailPoint (ISC/IIQ)
SCIM
REST
OAuth 2.0
Agentic AI
RPA
PowerShell
Python
Java
Workday
Active Directory
About the role
Core Mission: Senior technical lead architecting the end-to-end enterprise identity payload pipeline, establishing ‘connector factory’ sanitization standards and pre-production exit gates, driving the multi-year migration to SailPoint Identity Security Cloud (ISC), and aligning executive stakeholders with WEX’s IGA roadmap.
Responsibilities
•
IGA Payload Architecture & Migration Strategy: Architect the technical roadmap to migrate all WEX business applications off manual flat files and legacy SailPoint IIQ into cloud-native SailPoint Identity Security Cloud (ISC).
•
’Connector Factory’ Standards & Hand-Off Gates: Define enterprise application onboarding playbooks, payload schemas, and pre-production exit gates, ensuring clean, pre-tested payload packages are handed off smoothly to Security Engineering for final SailPoint deployment.
•
Enterprise RBAC/ABAC & Workday Birthright Architecture: Architect the global Role-Based and Attribute-Based Access Control model; map Workday attributes (WEX Job Role) directly to technical permission packages in SailPoint to enable zero-touch birthright provisioning.
•
Next-Gen Automation & Agentic AI: Design Agentic AI workflows (such as autonomous smart-approval engines for low-risk entitlement requests, intelligent account correlation algorithms, and automated orphan account detection) alongside enterprise RPA framework standards.
•
ARC Leadership & Executive Stakeholder Alignment: Govern the integration strategy between ITSM platforms and SailPoint to drive Access Request Centralization (ARC); negotiate with business directors and application owners to secure backlog prioritization and deliver on multi-year program commitments.
Qualifications, Key Attributes & Technical Stack:
•
Experience: Solid experience of advanced IAM architecture, payload pipeline engineering, and enterprise directory leadership.
•
Self-Sufficiency & Strategic Initiative: Exceptional self-sufficiency and drive; operates comfortably in complex, ambiguous environments, converting strategic visions into actionable engineering frameworks without waiting for detailed direction.
•
Multi-Tasking & Program Execution: Master-level ability to navigate and juggle complex, multi-track strategic programs (SailPoint ISC migration, Access Request Centralization, RBAC role mining) alongside high-priority compliance and operational demands simultaneously under tight deadlines.
•
Stakeholder Partnership & Executive Influence: High-impact stakeholder partner; proven capability to build consensus, negotiate backlog prioritization with directors and business leaders, champion compliance-by-design, and drive organizational change across decentralized business units.
Technical Stack: Master-level SailPoint (ISC/IIQ), SCIM / REST / OAuth 2.0 API gateways, Agentic AI & RPA strategy, PowerShell/Python/Java, Workday HR integration, and Active Directory architecture.