Security Engineer II — IAM & PAM Expert (On-Site Irving)

LTL Lennar Homes of TX L&C LTD; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Parental leave

Adoption assistance

Paid vacation

Job summary

Lennar is seeking a Security Engineer II / Systems Engineer II - Security in Irving, TX for an on-site role focused on strengthening identity security across IAM, IGA, and PAM platforms. The candidate will design, implement, and operate enterprise access controls, ensuring least privilege and secure privileged access for both human and non-human identities.

The role requires 4–5 years in cybersecurity with IAM exposure and hands-on experience with SailPoint, Delinea, CyberArk, Entra ID, and Ping

Qualifications

• Bachelor’s degree in CS, Cybersecurity, Engineering, or related field.
• 4–5 years of hands-on cybersecurity with IAM exposure.
• 4+ years in security engineering focusing on IAM like SailPoint, Delinea, CyberArk, Entra ID, Ping Identities.
• Experience with SSO, MFA, and identity integration protocols (SAML, OIDC).
• Experience building SailPoint connectors and HR-driven JML processes.

Responsibilities

• Support IAM/IGA/PAM solutions including SSO, MFA, and privileged access management.
• Engineer and operate IGA capabilities: joiner/mover/leaver workflows and RBAC/ABAC.
• Manage PAM: onboarding, vaulting, rotation, session monitoring, and JIT elevation.
• Design access controls for AI/non-human identities and machine-to-machine workflows.
• Monitor logs, assist in incident response, and remediate IAM findings.
• Collaborate with security, cloud, and DevOps teams to embed Zero Trust.
• Document architectures, runbooks, and provide guidance to teams.

Skills

Identity & Access Management

RBAC/ABAC

MFA

SSO

Zero Trust

Threat detection

Incident response

Education

Bachelor’s degree

Tools

SailPoint

Delinea

CyberArk

Entra ID

Ping Identity

Job description

Lennar is seeking a Security Engineer II / Systems Engineer II - Security in Irving, TX for an on-site role focused on strengthening identity security across IAM, IGA, and PAM platforms. The candidate will design, implement, and operate enterprise access controls, ensuring least privilege and secure privileged access for both human and non-human identities.

The role requires 4–5 years in cybersecurity with IAM exposure and hands-on experience with SailPoint, Delinea, CyberArk, Entra ID, and Ping