Principal Security Engineer - IAM

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

Join a Company that Empowers you to Build your Future

The Principal Security Engineer is the highest technical position within the security engineering team, responsible for driving the overall security strategy of the organization. This role is focused on designing cutting-edge security solutions, with a strong emphasis on cloud security, and leading the organization’s response to the most complex security challenges.

A career with purpose.

A career built on making dreams come true.

A career built on building zero defect homes, cost management, and adherence to schedules.

Your Responsibilities on the Team

Define and lead the implementation of the organization’s security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity

Architect and oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security.

Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews.

Collaborate with executive leadership to ensure that security initiatives align with the organization’s strategic goals and risk appetite.

Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery.

Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems.

Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies

Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations.

Develop and implement automated provisioning/deprovisioning workflows

Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications.

Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation.

Requirements

Education:

Bachelor’s degree in Computer Science, Cybersecurity, or a related discipline;
Master’s degree is highly preferred.

Professional

Experience:

Minimum of 10 years in security engineering, with significant expertise in Identity and Access Management (IAM).

Project Leadership:
Demonstrated success in leading large-scale IAM initiatives and formulating security strategies for complex organizations.

IAM Solutions:
Design and hands-on engineering across IAM:

Identity Providers (such as Microsoft Entra , Okta, Ping, Forge Rock),

Identity Governance & Administration (SailPoint, Saviynt),

Privileged Access Management (Cyber Ark, Delinea, Hashi Corp Vault), and

Customer IAM (Auth0, Ping One—preferred).

Protocols & APIs:
Deep understanding of federation protocols (SAML, OAuth
2.0, OIDC), SCIM, and RESTful APIs.

Directory Services & Cloud IAM:
Hands-on experience with Active Directory, LDAP, and cloud IAM solutions (Azure, AWS, GCP).

Security Frameworks:
Solid foundation in Zero Trust architecture and contemporary security standards.

Automation:
Proficient in scripting and automation using Power Shell, Python, Java, or RESTful APIs.

Recognized industry certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or equivalent credentials.

Exceptional leadership and communication abilities, capable of influencing executive decision-makers and directing cross-functional teams.

Physical & Office/Site Presence Requirements

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up…