Security Engineer II

Overview

Systems Engineer II - Security. THIS ROLE WILL BE BASED ON-SITE, IN OUR IRVING, TX. OFFICE. Lennar is a Fortune 500 company and is seeking a mid-level security-focused Systems Engineer to design, implement, and operate enterprise identity and access controls across IAM, IGA, and PAM platforms.

• Support enterprise IAM solutions delivering single sign-on (SSO), multifactor authentication (MFA), identity governance and administration, and privileged access management for on-premises, hybrid, cloud-only, non-human (service accounts), and API credentials.
• Engineer and operate IGA capabilities, including joiner–mover–leaver workflows, access request and approval, automated provisioning/de-provisioning, and RBAC/ABAC.
• Implement and manage PAM platforms for privileged onboarding, credential vaulting, password rotation, session monitoring/recording, and just-in-time (JIT) elevation.
• Design and implement identity and access controls for AI agents and non-human identities (service accounts, bots, APIs, workloads) with lifecycle management, secrets management, least-privilege roles, and monitoring of machine-to-machine access in alignment with Zero Trust principles.
• Monitor identity and privileged access activities, analyze logs and alerts, and support incident response and forensic investigations related to compromised identities or misuse of privilege.
• Support audit, compliance, and certification efforts by providing evidence, improving control design, and remediating findings related to IAM, IGA, and PAM.
• Troubleshoot complex IAM/IGA/PAM issues, perform root cause analysis, and drive continuous improvement and modernization of identity platforms.
• Collaborate with security architecture, infrastructure, application, and Dev Ops teams to embed identity security and Zero Trust principles in new solutions and strategic programs.
• Document architectures, standards, runbooks, and knowledge articles, and provide guidance and training to operations and application teams on identity security best practices.
• Participate in proofs of concept and product evaluations of new and emerging identity security services and technologies.
• Mentor and support junior security engineers and security operations team members as needed.

• Education: Bachelor’s degree required in Computer Science, Cybersecurity, Engineering, or related field.
• Experience: 4–5 years of hands-on cybersecurity engineering experience with exposure to IAM; 4+ years in security engineering with focus on IAM concepts and technologies (e.g., SailPoint, Delinea, Cyber Ark, Entra , Ping Identities).
• 2+ years of experience with IAM solutions including SSO, MFA, and integration protocols (SAML, OIDC).
• Experience building and maintaining SailPoint connectors, aggregation and provisioning jobs, roles/entitlements, and HR-driven JML workflows.
• Experience administering Microsoft Entra  (users, groups, roles, app registrations, enterprise applications).
• Working knowledge of IAM/IGA/PAM solutions and access control models (RBAC, ABAC, PBAC, FGAC).
• Certifications: CISSP, CompTIA Security+, CIAM, or similar advanced cloud security certifications preferred.
• Additional
  
  Skills:
  
  Cloud-based identity providers, hybrid federated IAM architectures;
  SailPoint Identity Security Cloud; strong AD Domain Services knowledge; experience with access control mechanisms, provisioning/deprovisioning, and authorization management; strong documentation and communication skills.
• Personal Attributes: Team player, strong written and verbal communication, problem solving, detail-oriented, adaptable, able to work with minimal supervision, good judgment in complex situations.
• Additional Requirements: Continuous learning and occasional travel.

Lennar offers benefits including health insurance (Medical, Dental, Vision), 401(k) with company match up to 5%, Paid Parental Leave, Adoption Assistance, Education Assistance, vacation, holidays, sick leave, personal days, referral bonuses, home purchase discounts, and other programs. Lennar is an equal opportunity employer.