Lead Identity and Access Management (IAM) Engineer

About the Company

Since 1967, Toll Brothers has been building luxury homes and communities in premier locations across the U.S. As a Fortune 500 company operating in over 60 markets, we are the country’s premier luxury builder offering a wide range of product types and price points for first-time, move-up, active-adult, and second-home buyers. We value diverse perspectives and strive to create an inclusive workplace where all employees feel treated with fairness, dignity, and respect.

About the Role

The Lead IAM Engineer will drive the design, implementation, and continuous improvement of enterprise identity and access management solutions. This role assists with identity architecture, automation, and security operations initiatives to ensure secure, scalable access across the organization. The position plays a key role in strengthening access controls, improving identity lifecycle processes, and enabling secure authentication and authorization across hybrid business application environments.

Responsibilities

• Lead IAM platform design across hybrid environments.
• Architect secure access models using role-based and attribute-based access controls and least-privilege principles.
• Implement single sign-on, multi-factor authentication, conditional access, and federation capabilities.
• Own identity lifecycle management processes, including provisioning, deprovisioning, access reviews, and access governance improvements.
• Design IAM workflows across departments, business applications, and IT service management platforms.
• Integrate IAM solutions with enterprise workflow and ticketing systems.
• Develop and maintain automation and orchestration solutions for repeatable access management processes.
• Integrate IAM capabilities with security monitoring, endpoint protection, and security automation platforms.
• Assist with identity-related threat hunting activities and incident investigations.
• Assist in managing enterprise identity directories and cloud identity services.
• Support authentication and access integrations across business applications.
• Drive adoption and implement identity governance and access control best practices.
• Serve as an escalation point for IAM-related issues.
• Mentor and guide engineering teams.
• Contribute to strategic IAM roadmap planning and continuous improvement initiatives.
• Perform all other duties as assigned.

Requirements

• Strong analytical, troubleshooting, and problem-solving skills.
• Deep understanding of identity and access security principles.
• Strong communication and collaboration skills with the ability to work across technical and business teams.
• Ability to translate identity security risks and control requirements into practical, scalable solutions.
• Proactive ownership mindset with the ability to mentor others and drive continuous improvement.

Qualifications

Essential

• 5+ years of IAM engineering experience.
• Expertise with enterprise identity and directory services.
• Experience implementing and maintaining IAM solutions.
• Experience developing automation and scripting solutions.
• Strong understanding and troubleshooting of identity governance, provisioning, and access lifecycle management.

Preferred

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Experience integrating IAM solutions with IT service management platforms.
• Experience in cloud-based identity and access management environments.
• Relevant cybersecurity or identity management certifications.

Benefits

• Comprehensive medical and dental coverage.
• 401(k) with company match.
• Discounted stock purchase plan.
• Discounts on mortgages and homes.
• Additional benefits and perks.