Senior Identity Security Architect

JLL supports the Whole You, personally and professionally.

Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology to our clients. We are committed to hiring the best, most talented people in our industry; and we support them through professional growth, flexibility, and personalized benefits to manage life in and outside of work. Whether you’ve got deep experience in commercial real estate, skilled trades, and technology, or you’re looking to apply your relevant experience to a new industry, we empower you to shape a brighter way forward so you can thrive professionally and personally.

Senior Identity Security Architect Level: P4 | Job Discipline:
Security Architecture Overview At  JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. As our Senior Identity Security Architect, you'll be shaping the strategy that defines how 100,000+ employees, clients, and partners authenticate, access, and interact with JLL's global technology ecosystem. This is a high-impact architecture role. You will be responsible for setting direction, establishing standards, and partnering with engineering and product teams to ensure that identity security is designed correctly from the ground up.

From zero trust frameworks to privileged access governance to customer identity in JLL’s digital products, your architectural decisions will directly shape JLL’s security posture at enterprise scale.

If you’re a strategic thinker with deep identity expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you.

Essential Duties and Responsibilities Identity Strategy & Architecture Define and own JLL's enterprise identity security architecture spanning IdP services (Okta or Entra preferred), Active Directory, M365, cloud platforms (AWS/Azure), and third-party SaaS.Ensuring a coherent, scalable, and secure design across the global technology estate.

Establish and maintain identity security policy and standards across users, non-person accounts, and on-premises, cloud, and SaaS platforms, in partnership with key identity stakeholders.

Partner with Identity Security, Engineering, and operations teams to develop to translate standards and patterns into actionable engineering and operational direction.

Lead JLL's zero trust strategy for user and third-party access in close partnership with the network security organization, driving architectural decisions that eliminate implicit trust across the environment.

Shape the architectural vision for Customer Identity and Access Management (CIAM) within JLL's externally-facing digital products, ensuring secure and seamless experiences for clients and partners.

Extend identity security architecture beyond the human user scope and into NHI landscapes for machine identity and service accounts including creation of AI, API, and other modern auth patterns and standards.

Identity Governance & Administration Architecture coverage for JLL's identity governance and administration strategy across different identity platforms, assisting in defining entitlement models, access certification and review cadence, and joiner/mover/leaver lifecycle standards and management.

Assist in defining segregation-of-duties and least-privilege policy for toxic-combination detection, and partner with application and platform owners to translate that policy into enforceable entitlement structures and operating models.

Privileged Access Governance Architect JLL's Privileged Access Management strategy, defining controls for privileged accounts that minimize abuse potential and enable robust detection of insider and…