WEX
WEX
WEX is a global commerce platform that helps organizations manage essential business operations through specialized payment and administrative solutions. Its offerings include fuel cards, fleet management, and analytics for logistics and transportation teams; business payment tools designed to simplify transactions and strengthen control; and employee benefits administration for health and reimbursement accounts. With work spanning healthcare, logistics, and travel, WEX develops technology intended to make complex commercial processes more efficient, secure, and easier to manage.

IAM Information Systems Engineer Level 3 – WEX, Brazil Remote

Lead WEX’s migration to SailPoint Identity Security Cloud while designing enterprise RBAC, ABAC, and identity automation frameworks. This Brazil-based remote role focuses on scalable IGA delivery, connector standards, and strategic program execution.

Description

  • Own the technical roadmap for moving WEX business applications from manual flat files and legacy SailPoint IIQ to cloud-native SailPoint Identity Security Cloud.
  • Create enterprise application onboarding playbooks, payload schemas, and pre-production exit criteria.
  • Validate payload packages and transfer deployment-ready deliverables to Security Engineering for SailPoint implementation.
  • Design the global Role-Based Access Control and Attribute-Based Access Control model.
  • Translate Workday attributes, including WEX Job Role, into SailPoint permission packages that support zero-touch birthright provisioning.
  • Develop Agentic AI workflows for smart approvals, account correlation, and orphan-account detection.
  • Set standards for the enterprise RPA framework.
  • Direct the integration strategy between ITSM platforms and SailPoint to support Access Request Centralization.
  • Work with business directors and application owners to obtain backlog prioritization.
  • Execute commitments across multi-year programs.

Requirements

  • Advanced experience in IAM architecture, payload pipeline engineering, and enterprise directory leadership.
  • Strong independence and initiative, with the ability to work through ambiguity and turn strategic objectives into practical engineering frameworks.
  • Expertise managing complex, concurrent strategic programs against demanding deadlines.
  • Demonstrated ability to build consensus, negotiate priorities with directors and business leaders, promote compliance by design, and lead change across decentralized business units.
  • Advanced proficiency with SailPoint Identity Security Cloud and IdentityIQ.
  • Experience with SCIM, REST, and OAuth 2.0 API gateways.
  • Knowledge of Agentic AI and RPA strategy.
  • Proficiency in PowerShell, Python, and Java.
  • Experience integrating Workday with identity systems.
  • Expertise in Active Directory architecture.

Related Jobs