Security Engineer II - IAM & Zero Trust (On-Site)

Lennar Corporation; Irving (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

Lennar is seeking a Security Engineer II to fortify and manage the organization’s IAM, IGA, and PAM security controls. The role focuses on designing, implementing, and operating enterprise identity security across on‑prem, hybrid, and cloud environments.

The ideal candidate has 4–5 years in cybersecurity engineering with IAM exposure, hands-on experience with SailPoint and Entra ID, and strong communication skills. This is an on‑site Irving, TX position with comprehensive benefits.

Qualifications

• Bachelor’s degree or equivalent in computer science, cybersecurity, or related field.
• 4-5 years of hands-on cybersecurity engineering experience with exposure to IAM.
• 2+ years of implementing SSO, MFA, and identity integrations (SAML, OIDC).
• Experience building SailPoint connectors, provisioning, roles and workflows for HR processes.
• Experience administering Microsoft Entra ID (formerly Azure AD) and enterprise apps.

Responsibilities

• Support enterprise IAM solutions delivering SSO, MFA, IAM governance, and PAM across multiple identities.
• Engineer and operate IGA capabilities: joiner/mover/leaver workflows, automated provisioning, RBAC/ABAC.
• Design and implement PAM platforms for privileged accounts and credentials rotation, session monitoring, and JIT elevation.
• Monitor IAM/IGA/PAM activities; analyze logs, respond to incidents, and support audits.
• Collaborate with security architecture, infra, apps, and DevOps to embed Zero Trust in new solutions.
• Document architectures, runbooks, and provide training on identity security.

Skills

IAM

RBAC/ABAC

Zero Trust

Teamwork

Communication

SecOps

Problem Solving

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field

Tools

SailPoint

Delinea

CyberArk

Entra ID

Ping Identity

Job description

Lennar is seeking a Security Engineer II to fortify and manage the organization’s IAM, IGA, and PAM security controls. The role focuses on designing, implementing, and operating enterprise identity security across on‑prem, hybrid, and cloud environments.

The ideal candidate has 4–5 years in cybersecurity engineering with IAM exposure, hands-on experience with SailPoint and Entra ID, and strong communication skills. This is an on‑site Irving, TX position with comprehensive benefits.