Security Engineer II (IAM)

Location: On-site in Irving, Texas, United States; occasional travel required.

Company

hirify.global is a Fortune 500 homebuilder providing residential construction and related customer services across the United States.

What you will do

• Design, implement, operate, and improve enterprise IAM, IGA, and PAM capabilities, including SSO, MFA, RBAC/ABAC, JML workflows, provisioning, deprovisioning, and access approvals.
• Administer privileged access controls, including credential vaulting, password rotation, session monitoring and recording, and just-in-time elevation.
• Secure AI agents and non-human identities such as service accounts, bots, APIs, workloads, tokens, and application credentials through lifecycle management, secrets management, least-privilege roles, and monitoring.
• Monitor identity and privileged-access activity, analyze alerts and logs, and support incident response, forensic investigations, audits, certifications, and remediation.
• Troubleshoot complex IAM issues, perform root-cause analysis, modernize identity platforms, and collaborate with architecture, infrastructure, application, and DevOps teams on Zero Trust initiatives.
• Document architectures and runbooks, provide guidance and training, evaluate emerging identity-security technologies, and mentor junior security engineers and security operations staff.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field.
• 4–5 years of hands-on cybersecurity engineering experience with IAM exposure, including 4+ years in security engineering focused on IAM technologies.
• 2+ years implementing and configuring IAM solutions for SSO, MFA, and identity integration protocols including SAML and OIDC.
• Experience with SailPoint connectors, aggregation and provisioning jobs, roles, entitlements, and HR-driven JML workflows.
• Experience administering Microsoft Entra ID users, groups, roles, app registrations, and enterprise applications.
• Working knowledge of IGA, PAM, and access-control models including RBAC, ABAC, PBAC, and FGAC.
• Working knowledge of cloud identity providers, access controls, and hybrid federated IAM architectures.
• Experience designing, configuring, and administering SailPoint Identity Security Cloud for identity lifecycle, access requests, certifications, and policy/SoD controls.
• Strong knowledge of Microsoft Active Directory Domain Services, AD users and security groups, Group Policy Objects, and AD security practices; strong communication, presentation, problem-solving, critical-thinking, decision-making, teamwork, and independent-working skills.
• Must work on-site in Irving, TX, and be willing to travel occasionally.

Nice to have

• CISSP, CompTIA Security+, Certified Identity and Access Manager (CIAM), or a similar advanced cloud-security certification.

Culture & Benefits

• Full-time employment in a collaborative, team-oriented environment with opportunities to work with senior engineers, IT teams, and business stakeholders.
• Medical, dental, and vision insurance, a 401(k) plan with a dollar-for-dollar company match up to 5%, paid parental leave, and an Associate Assistance Plan.
• Education assistance, up to $30,000 in adoption assistance, up to three weeks of vacation from hire, holidays, sick leave, and personal days.
• Home purchase discounts, a new-hire referral bonus program, and ongoing certification and training opportunities.