[Hiring] Senior Identity Security Architect @JLL

Role Description

At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. As our Senior Identity Security Architect, you'll be shaping the strategy that defines how 100,000+ employees, clients, and partners authenticate, access, and interact with JLL's global technology ecosystem. This is a high-impact architecture role.

• Define and own JLL's enterprise identity security architecture spanning IdP services (Okta or Entra preferred), Active Directory, M365, cloud platforms (AWS/Azure), and third-party SaaS.
• Ensure a coherent, scalable, and secure design across the global technology estate.
• Establish and maintain identity security policy and standards across users, non-person accounts, and on-premises, cloud, and SaaS platforms.
• Partner with Identity Security, Engineering, and operations teams to translate standards and patterns into actionable engineering and operational direction.
• Lead JLL's zero trust strategy for user and third-party access in close partnership with the network security organization.
• Shape the architectural vision for Customer Identity and Access Management (CIAM) within JLL's externally-facing digital products.
• Extend identity security architecture beyond the human user scope into NHI landscapes for machine identity and service accounts.
• Assist in defining entitlement models, access certification and review cadence, and joiner/mover/leaver lifecycle standards and management.
• Define segregation-of-duties and least-privilege policy for toxic-combination detection.
• Architect JLL's Privileged Access Management strategy, defining controls for privileged accounts.
• Provide strategic direction to engineering teams operating JLL's PAM tooling.
• Collaborate with cyber threat management and insider threat teams to embed identity-aware detection and response capabilities.
• Partner with Active Directory, authentication, and cloud engineering teams to translate security architecture into enforceable controls.
• Serve as the identity security subject matter expert on major programs, technology transformations, and acquisitions.
• Lead security architecture reviews and design governance processes.
• Provide technical guidance and mentoring to junior security engineers, developers, and architects.
• Support secure development training and awareness programs.

Qualifications

• 10+ years of technical cybersecurity experience.
• At least 7 years focused on identity security architecture in large, complex enterprise environments.
• Demonstrated success designing and maturing enterprise identity security programs.

Requirements

• Hands-on architectural experience with enterprise IdP platforms (Okta strongly preferred) and Privileged Access Management solutions (CyberArk strongly preferred).
• Experience securing identity across M365, AWS/Azure, SaaS applications, and on-premises infrastructure.
• Experience implementing Active Directory governance models.
• Track record of partnering with threat management, insider threat, and incident response teams.
• Experience architecting identity for non-person and machine-to-machine access.

Benefits

• Remote work opportunity.
• Encouragement to apply even if not meeting all requirements.