Security Engineer II

Lennar•Irving, TX

5d•Onsite

About The Position

The Systems Engineer II - Security is a mid-level role responsible for enhancing and maintaining the security of Lennar’s IT infrastructure. The position designs, implements, and operates enterprise identity and access controls across IAM, IGA, and PAM platforms, ensuring appropriate access for users and workloads while reducing identity-related risk through least privilege, stronger authentication, and privileged-access governance aligned with security and regulatory requirements. The role supports a large-scale enterprise and works with security architecture, infrastructure, application, and DevOps teams to embed identity security and Zero Trust principles into solutions and strategic programs. It also contributes to audits, incident response, platform modernization, documentation, product evaluations, and guidance for operations and application teams. The position is based on-site in Lennar’s Irving, Texas office, with occasional travel.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field.
4–5 years of hands-on cybersecurity engineering experience with exposure to IAM.
At least 4 years of relevant security engineering experience focused on IAM concepts and technologies such as SailPoint, Delinea, CyberArk, Entra ID, or Ping Identity.
At least 2 years of relevant experience with IAM solutions, including implementing and configuring SSO, MFA, and identity integration protocols such as SAML and OIDC.
Experience building and maintaining SailPoint connectors, aggregation and provisioning jobs, roles and entitlements, and workflows for HR-driven JML processes.
Experience administering Microsoft Entra ID, including users, groups, roles, app registrations, and enterprise applications.
Working knowledge of IGA and PAM solutions and access-control models such as RBAC, ABAC, PBAC, and FGAC.
Working knowledge of cloud-based identity providers, access controls, and hybrid federated IAM architectures.
Experience designing, configuring, and administering SailPoint Identity Security Cloud for identity lifecycle, access requests, certifications, and policy/SoD controls.
Strong knowledge of Microsoft Active Directory Domain Services, management of AD users and security groups, and security best practices for AD infrastructure, policies, and Group Policy Objects.
Experience implementing access-control mechanisms, including authentication policies, identity lifecycle management, and authorization management.
Strong visual-design documentation skills using tools such as Visio or Lucid, along with oral presentation, problem-solving, critical-thinking, and decision-making skills.
Strong verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences and support customer service.
Ability to facilitate productive meetings and work in a team-oriented environment.
Ability to balance competing priorities in a fast-paced environment and execute workstreams independently with sound judgment and minimal supervision.
Commitment to staying current with industry trends and pursuing relevant certifications and training.
Willingness to travel occasionally.

Nice To Haves

CISSP, CompTIA Security+, Certified Identity and Access Manager (CIAM), or a similar advanced cloud security certification.
Ability to mentor junior security engineers and security operations team members.

Responsibilities

Support enterprise IAM solutions providing SSO, MFA, identity governance and administration, and privileged access management for on-premises, hybrid, cloud-only, non-human, and application-based identities.
Engineer and operate IGA capabilities, including joiner-mover-leaver workflows, access requests and approvals, automated provisioning and de-provisioning, and RBAC/ABAC.
Implement and manage PAM capabilities such as privileged-account onboarding, credential vaulting, password rotation, session monitoring and recording, and just-in-time elevation.
Design and implement identity and access controls for AI agents and non-human identities, including lifecycle and secrets management, least-privilege roles, and monitoring of machine-to-machine access in alignment with Zero Trust principles.
Monitor identity and privileged-access activity, analyze logs and alerts, and support incident response and forensic investigations involving compromised identities or misuse of privilege.
Support audits, compliance, and certification efforts by providing evidence, improving control design, and remediating IAM, IGA, and PAM findings.
Troubleshoot complex IAM, IGA, and PAM issues, perform root cause analysis, and drive continuous improvement and modernization of identity platforms.
Collaborate with security architecture, infrastructure, application, and DevOps teams to incorporate identity security and Zero Trust principles into new solutions and strategic programs.
Document architectures, standards, runbooks, and knowledge articles, and provide identity-security guidance and training to operations and application teams.
Participate in proofs of concept and evaluations of emerging identity-security services and technologies.
May mentor and support junior security engineers and security operations team members.