Lead Identity and Access Management (IAM) Engineer at Toll Brothers, Inc.
Fort Washington, PA
—
Jul 23, 2026
Fort Washington, PA
Jul 26, 2026
What this job asks for AI summary
A senior engineering role focused on designing and maintaining enterprise identity and access management systems across hybrid environments. Day-to-day work spans architecting access control models, automating identity lifecycle processes, integrating IAM platforms with security and workflow tools, and supporting incident response. Suited to an experienced IAM engineer comfortable operating at a technical lead level, including mentoring others and contributing to long-term roadmap planning.
Senior level · 5+ years · Philadelphia-Camden-Wilmington, PA-NJ-DE-MD · Full-time
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 230 people in the Philadelphia-Camden-Wilmington, PA-NJ-DE-MD area plausibly meet what this posting asks for (information security analysts). range 95–340
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $135,475 (middle half $101,473–$166,676).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (6)
The title 'Lead IAM Engineer' carries no standard seniority level word (Junior/Mid/Senior/Staff/Principal), so the title states no level; the 5+ years requirement and scope (architecture ownership, mentoring, escalation point, roadmap contribution) support a Senior classification.
SOC code 15-1212 (Information Security Analysts) is the closest fit given the primary focus on identity security, access governance, and threat detection; however, the heavy engineering/platform-building emphasis could also support 15-1299 (Computer Occupations, All Other), listed as the runner-up.
The JD names no specific IAM platform (e.g., Okta, SailPoint, CyberArk, Azure AD/Entra ID, Ping Identity) — skills are captured at the capability level as described in the requirements section.
A Bachelor's degree is listed under the Preferred section only, so the degree requirement is set to None.
No compensation figures are provided in the posting.
Ignored 4 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): IAM engineering, identity lifecycle management, identity governance, scripting/automation.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.