[Hiring] Senior Manager, Identity Operations & Engineering @WEXWEXUS

Role Description

We are seeking a critical thinker with a strategic mindset to serve as the enterprise "Process Owner" for WEX’s identity lifecycle. Currently, WEX is undertaking a strategic modernization effort to automate identity lifecycles, eliminate manual ticket-driven provisioning, and migrate to a cloud-native identity governance architecture centered on SailPoint Identity Security Cloud (ISC).

As the Process Owner, you will define the strategy, prioritization, and technical readiness of our Identity and Access Management (IAM) initiatives. You must have a demonstrated history of success in managing complex identity programs and translating technical IAM concepts into tangible business value.

A critical component of this position involves heavy partnership with WEX Application Owners to ensure their systems' identity management payloads are standardized, sanitized, and ready for integration.

How you’ll make an impact

• Process Ownership & Identity Governance
  • Act as the primary Process Owner and single accountable leader for WEX’s Joiner, Mover, and Leaver (JML) identity lifecycle outcomes.
  • Co-host WEX's IAM Governance Council alongside a designated leader from Information Security to drive policy reviews, prioritize the enterprise IAM backlog, and align on risk reduction.
  • Define the business and technical requirements for automated lifecycle workflows, such as establishing "Birthright" access tied to Workday attributes and event-triggered Mover processes.
  • Break down silos between Security Engineering, Tech Operations, and Infrastructure.
  • Operationalize WEX's IAM Governance Council to drive policy reviews, continuous improvement cycles, and establish measurable KPIs/KRIs (e.g., provisioning SLAs, MTTR for terminations, automated coverage).
• IAM Engineering & Operations Management
  • Lead and develop a blended group consisting of an IAM Operations team and an IAM Engineering team (including Active Directory engineers).
  • Establish a seamless, continuous partnership with the Information Security SailPoint Administration/Configuration team.
  • Support the architectural migration from legacy on-premise SailPoint IdentityIQ (IIQ) to the SailPoint Identity Security Cloud (ISC) SaaS platform.
  • Centralize all access requests natively within SailPoint ISC, decommissioning the legacy Employee Service Portal (ESP/JSM) for IAM requests.
  • Transition WEX from delayed termination batch-syncs to event-driven termination processing.
  • Ensure adherence to established ITSM/ITIL standards.
  • Foster a culture of continuous improvement, automation, and toil reduction across all identity processes.
  • Oversee the health, security, and lifecycle management of enterprise directory services.
  • Define architectural standards for directory services.
• Application Owner Partnership & Integration Testing
  • Serve as the primary technical liaison to Application Owners.
  • Define the application onboarding framework, establishing a tiered, risk-based prioritization backlog.
  • Partner with application teams to design, extract, and standardize identity data payloads.
  • Oversee the "connector factory" preparation process.
• Identity Operations & Provisioning Automation (UAP)
  • Transform daily identity operations by centralizing all access requests natively within SailPoint.
  • Drive continuous toil reduction by replacing manual service desk tickets with automated, API-driven provisioning workflows.
• Strategic ABAC/RBAC Prioritization & Preventative Security
  • Experience designing and implementing access control frameworks (RBAC, ABAC, or hybrid models).
  • Make ABAC/RBAC a top organizational priority.
  • Drive a massive entitlement rationalization exercise across WEX's 10,600 entitlements.
  • Design roles that enforce Segregation of Duties (SoD) boundaries.
  • Decommission external spreadsheet-based role tracking.

Qualifications

• 7+ years of technical leadership experience in Identity and Access Management.
• Demonstrated history of success in executing enterprise-level IAM transformations.

Requirements

• Strong architectural understanding of SailPoint Identity Security Cloud (ISC), data models, API/SCIM integrations, Active Directory (AD), Workday, and enterprise ITSM platforms.
• Relevant industry certifications (e.g., Certified Identity and Access Manager (CIAM), CISSP, CISM, ITIL v4 Foundation/Strategic Leader, or SailPoint-specific certifications).
• Deep understanding of ITSM/ITIL frameworks.
• Exceptional strategic mindset with the ability to co-lead governance committees.

Benefits

• Health, dental and vision insurances.
• Retirement savings plan.
• Paid time off.
• Health savings account.
• Flexible spending accounts.
• Life insurance.
• Disability insurance.
• Tuition reimbursement.

Company Description

The base pay range represents the anticipated low and high end of the pay range for this position. Actual pay rates will vary and will be based on various factors, such as your qualifications, skills, competencies, and proficiency for the role. Base pay is one component of WEX's total compensation package. Most sales positions are eligible for commission under the terms of an applicable plan. Non-sales roles are typically eligible for a quarterly or annual bonus based on their role and applicable plan. WEX's comprehensive and market competitive benefits are designed to support your personal and professional well-being.

Pay Range: $152,400.00 - $173,300.00