Security Engineer II

Lennar•Irving, TX

4d•Onsite

About The Position

The Systems Engineer II – Security is a mid-level position responsible for enhancing and maintaining the security of Lennar’s information technology infrastructure. The role designs, implements, and operates enterprise identity and access controls across IAM, IGA, and PAM platforms so the right users and workloads have the right access at the right time. It reduces identity-related risk by enforcing least privilege, strengthening authentication, and governing privileged access in alignment with security and regulatory requirements. This role is based on-site in Lennar’s Irving, Texas office. It supports identity security across on-premises, hybrid, cloud-only, non-human, and application-based identities, including AI agents, service accounts, bots, APIs, and workloads. The engineer collaborates with security architecture, infrastructure, application, and DevOps teams, and may mentor junior security engineers and security operations team members. Occasional travel is expected. Lennar describes itself as one of the nation’s leading homebuilders and a Fortune 500 company. It emphasizes quality homes, customer service, community involvement, and opportunities for Associate growth. The position provides essential security services to protect the operations of a large-scale enterprise.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field.
4–5 years of hands-on cybersecurity engineering experience with exposure to IAM.
At least 4 years of relevant security engineering experience focused on IAM concepts and technologies such as SailPoint, Delinea, CyberArk, Entra ID, or Ping Identity.
At least 2 years of relevant experience with IAM solutions, including implementation and configuration of SSO, MFA, and identity integration protocols such as SAML and OIDC.
Experience building and maintaining SailPoint connectors, aggregation and provisioning jobs, roles and entitlements, and workflows for HR-driven joiner-mover-leaver processes.
Experience administering Microsoft Entra ID, including users, groups, roles, app registrations, and enterprise applications.
Working knowledge of IGA, PAM, and access-control models such as RBAC, ABAC, PBAC, and FGAC.
Working knowledge of cloud-based identity providers, access controls, and hybrid federated IAM architectures.
Experience designing, configuring, and administering SailPoint Identity Security Cloud for identity lifecycle, access requests, certifications, and policy/SoD controls.
Strong knowledge and experience with Microsoft Active Directory Domain Services, managing AD users and security groups, and security best practices for AD infrastructure, policies, and Group Policy Objects.
Experience implementing access-control mechanisms, including authentication policies, identity lifecycle management, and authorization management.
Strong visual-design documentation skills using tools such as Visio or Lucid.
Strong oral presentation, problem-solving, critical-thinking, and decision-making skills.
Strong verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences and support customer service.
Ability to facilitate productive meetings and work comfortably in a team-oriented environment.
Ability to collaborate with senior engineers, IT teams, and other stakeholders.
Attention to detail and consideration of non-technical components needed to execute projects and initiatives successfully.
Ability to balance competing priorities in a fast-paced environment, execute workstreams independently with minimal supervision, and exercise sound judgment in complex situations.
Commitment to continuous learning and pursuing relevant certifications and training.
Willingness to travel occasionally.

Nice To Haves

CISSP, CompTIA Security+, Certified Identity and Access Manager (CIAM), or a similar advanced cloud security certification.
Mentoring experience or ability to provide support to junior security engineers and security operations team members.

Responsibilities

Support enterprise IAM solutions delivering single sign-on (SSO), multifactor authentication (MFA), identity governance and administration, and privileged access management for on-premises, hybrid, cloud-only, non-human, and application-based identities.
Engineer and operate IGA capabilities, including joiner-mover-leaver workflows, access requests and approvals, automated provisioning and de-provisioning, and role-based and attribute-based access control.
Implement and manage PAM platforms for privileged account onboarding, credential vaulting, password rotation, session monitoring and recording, and just-in-time elevation.
Design and implement identity and access controls for AI agents and non-human identities, including lifecycle and secrets management, least-privilege roles, and monitoring machine-to-machine access in alignment with Zero Trust principles.
Monitor identity and privileged-access activities, analyze logs and alerts, and support incident response and forensic investigations involving compromised identities or misuse of privilege.
Support audits, compliance, and certification efforts by providing evidence, improving control design, and remediating IAM, IGA, and PAM findings.
Troubleshoot complex IAM, IGA, and PAM issues, perform root-cause analysis, and drive continuous improvement and modernization of identity platforms.
Collaborate with security architecture, infrastructure, application, and DevOps teams to embed identity security and Zero Trust principles in new solutions and strategic programs.
Document architectures, standards, runbooks, and knowledge articles, and provide identity-security guidance and training to operations and application teams.
Participate in proof-of-concept projects and evaluations of emerging identity-security services and technologies.
May mentor and support junior security engineers and security operations team members.
Stay current with industry trends and pursue relevant certifications and training.
Travel occasionally.