Security Engineer II — IAM & PAM Specialist

Lennar Corporation; Irving (TX); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Education Assistance Program

Adoption Assistance

Home Purchase Discounts

Three weeks vacation

Job summary

Lennar is seeking a mid‑level Security Engineer II to enhance and operate the enterprise identity and access controls landscape. You will design, implement, and support IAM/IGA/PAM across on‑prem and cloud identities, focusing on least privilege, strong authentication, and privileged access governance.

The role collaborates with Security, IT, and DevOps teams to embed Zero Trust across solutions, while mentoring junior engineers and supporting audit and compliance activities.

Qualifications

• 4-5 years of hands-on cybersecurity engineering experience with exposure to IAM.
• 4+ years of security engineering experience focusing on IAM concepts and technologies (SSO, MFA, IAM)
• 2+ years implementing SSO, MFA, and identity integration protocols (SAML, OIDC)
• Experience building SailPoint connectors, provisioning jobs, roles/entitlements, HR-driven JML processes
• Experience administering Microsoft Entra ID and AD infrastructure

Responsibilities

• Support enterprise IAM solutions for SSO, MFA, IGA, and PAM.
• Design and operate IGA capabilities including joiner/mover/leaver workflows and RBAC/ABAC.
• Implement and manage PAM platforms for privileged access management.
• Monitor IAM and PAM activities, analyze logs, and support incident response and forensics.
• Collaborate with security architecture, infrastructure, and DevOps to embed identity security and Zero Trust principles.

Skills

IAM

Security engineering

Zero Trust

Education

Bachelor’s degree in Computer Science or related field

Tools

SailPoint

Delinea

CyberArk

Entra ID

Ping Identity

Microsoft Entra ID

Active Directory

Job description

Lennar is seeking a mid‑level Security Engineer II to enhance and operate the enterprise identity and access controls landscape. You will design, implement, and support IAM/IGA/PAM across on‑prem and cloud identities, focusing on least privilege, strong authentication, and privileged access governance.

The role collaborates with Security, IT, and DevOps teams to embed Zero Trust across solutions, while mentoring junior engineers and supporting audit and compliance activities.