IAM Security Engineer I

Lennar USA; Irving (TX); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid parental leave

Education assistance

Job summary

Lennar is seeking a Systems Engineer I - Security to enhance and maintain the security of the company’s IT infrastructure. The role focuses on designing, implementing, and operating enterprise IAM, IGA, and PAM to ensure proper access controls across environments.

The ideal candidate has 2–3 years in cybersecurity engineering with IAM, hands-on experience with SailPoint, Delinea, and Entra ID, and a solid understanding of SSO and MFA implementations.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.
• 2–3 years hands-on cybersecurity engineering with IAM exposure.
• 2+ years with IAM solutions including SSO, MFA, and protocols like SAML/OIDC.
• Experience administering SailPoint connectors and Entra ID.

Responsibilities

• Support enterprise IAM that delivers SSO, MFA, identity governance, and privileged access management across identities (on-prem, hybrid, cloud, service accounts).
• Monitor IAM activities, analyze logs, and support incident response and investigations related to identities or privilege misuse.
• Support audit and certification efforts by improving control design and remediating findings in IAM/IGA/PAM.
• Troubleshoot IAM issues, perform root-cause analysis, and modernize identity platforms.
• Collaborate with security, infra, application, and DevOps teams to embed identity security and Zero Trust in solutions.

Skills

IAM

SSO

MFA

RBAC

Delinea

Education

Bachelor's degree in Computer Science/Cybersecurity/Engineering

Tools

SailPoint

Delinea

CyberArk

Entra ID

Ping Identity

Active Directory

Job description

Lennar is seeking a Systems Engineer I - Security to enhance and maintain the security of the company’s IT infrastructure. The role focuses on designing, implementing, and operating enterprise IAM, IGA, and PAM to ensure proper access controls across environments.

The ideal candidate has 2–3 years in cybersecurity engineering with IAM, hands-on experience with SailPoint, Delinea, and Entra ID, and a solid understanding of SSO and MFA implementations.