Senior Identity Security Architect

Jones Lang LaSalle Incorporated; Benidorm; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

Jones Lang LaSalle Incorporated seeks a Senior Identity Security Architect to lead the strategy and implementation of enterprise identity security across all platforms. You will coach engineering teams, define standards, and drive zero trust and privileged access governance initiatives globally.

The role focuses on shaping the security posture for large, complex environments, including customer identity in digital products and machine identities, with cross-functional collaboration across

Formación

• 10+ years of technical cybersecurity experience with identity security programs.
• Experience designing enterprise identity security architectures for large environments.
• Hands-on with IdP platforms (Okta/Entra) and PAM tooling (CyberArk).
• Experience securing identity across M365, AWS/Azure, SaaS and on-prem systems.

Responsabilidades

• Define and own enterprise identity security architecture spanning IdP services, AD, M365, cloud platforms, and SaaS.
• Maintain identity security policy and standards across users, service accounts, on-prem and cloud environments.
• Lead zero trust, CIAM, and privilege access governance with engineering and product teams.
• Shape architecture for non-human/machine identity including service accounts and workloads.
• Provide guidance to teams on identity governance and access management controls.

Conocimientos

Identity security

Zero trust

PAM

Okta

Entra

Active Directory

CIAM

OAuth 2.0/OIDC

AWS/Azure

CyberArk

Educación

Bachelor's degree in CS/Security

10+ years cybersecurity experience

Herramientas

Okta

Entra ID

M365

Descripción del empleo

JLL supports the Whole You, personally and professionally.Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology to our clients. We are committed to hiring the best, most talented people in our industry; and we support them through professional growth, flexibility, and personalized benefits to manage life in and outside of work. Whether you’ve got deep experience in commercial real estate, skilled trades, and technology, or you’re looking to apply your relevant experience to a new industry, we empower you to shape a brighter way forward so you can thrive professionally and personally.Senior Identity Security ArchitectLevel: P4 | Job Discipline: Security ArchitectureOverviewAt JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. As our Senior Identity Security Architect, you'll be shaping the strategy that defines how 100,000+ employees, clients, and partners authenticate, access, and interact with JLL's global technology ecosystem. This is a high-impact architecture role. You will be responsible for setting direction, establishing standards, and partnering with engineering and product teams to ensure that identity security is designed correctly from the ground up. From zero trust frameworks to privileged access governance to customer identity in JLL’s digital products, your architectural decisions will directly shape JLL’s security posture at enterprise scale.If you’re a strategic thinker with deep identity expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you.Essential Duties and ResponsibilitiesIdentity Strategy & ArchitectureDefine and own JLL's enterprise identity security architecture spanning IdP services (Okta or Entra preferred), Active Directory, M365, cloud platforms (AWS/Azure), and third-party SaaS.Ensuring a coherent, scalable, and secure design across the global technology estate.Establish and maintain identity security policy and standards across users, non-person accounts, and on-premises, cloud, and SaaS platforms, in partnership with key identity stakeholders.Partner with Identity Security, Engineering, and operations teams to develop to translate standards and patterns into actionable engineering and operational direction.Lead JLL's zero trust strategy for user and third-party access in close partnership with the network security organization, driving architectural decisions that eliminate implicit trust across the environment.Shape the architectural vision for Customer Identity and Access Management (CIAM) within JLL's externally-facing digital products, ensuring secure and seamless experiences for clients and partners.Extend identity security architecture beyond the human user scope and into NHI landscapes for machine identity and service accounts including creation of AI, API, and other modern auth patterns and standards.Identity Governance & AdministrationArchitecture coverage for JLL's identity governance and administration strategy across different identity platforms, assisting in defining entitlement models, access certification and review cadence, and joiner/mover/leaver lifecycle standards and management.Assist in defining segregation-of-duties and least-privilege policy for toxic-combination detection, and partner with application and platform owners to translate that policy into enforceable entitlement structures and operating models.Privileged Access GovernanceArchitect JLL's Privileged Access Management strategy, defining controls for privileged accounts that minimize abuse potential and enable robust detection of insider and external threats.Provide strategic direction to engineering teams operating JLL's PAM tooling (CyberArk preferred), ensuring the platform evolves to meet emerging threat and business requirements.Collaborate with cyber threat management and insider threat teams to embed identity-aware detection and response capabilities across the enterprise.Cross-Functional Leadership & InfluencePartner with Active Directory, authentication, and cloud engineering teams to translate security architecture into enforceable controls and compliant implementations.Serve as the identity security subject matter expert on major programs, technology transformations, and acquisitions. Bring architectural clarity to complex, multi-stakeholder initiatives.Lead security architecture reviews and design governance processes; mentor junior architects and security professionals across the team.Communicate advanced security architecture strategies and design rationale clearly to diverse audiences from engineering teams to senior business stakeholders.Mentorship & Team LeadershipProvide technical guidance and mentoring to junior security engineers, developers, and architects on application security principles, secure coding practices, and architectural standards.Lead cross-functional security initiatives, driving collaborative approaches to security integration across development and architecture teams.Support secure development training and awareness programs to build security competency across engineering organizations.Required Knowledge, Skills, and AbilitiesTechnical KnowledgeHands-on architectural experience with enterprise IdP platforms (Okta strongly preferred) and Privileged Access Management solutions (CyberArk strongly preferred).Experience securing identity across M365, AWS/Azure, SaaS applications, and on-premises infrastructure.Experience implementing Active Directory governance models that enforce security policy and compliance requirements, including hybrid AD/Entra ID sync architecture, delegation and privilege-escalation attack paths (e.g., resource-based constrained delegation, Kerberos delegation), and tiered administrative models.Track record of partnering with threat management, insider threat, and incident response teams to design identity-aware detection capabilities.Experience architecting identity for non-person and machine-to-machine access such as service accounts, workload identity, and OAuth delegation patterns (client credentials, on-behalf-of/token exchange) for service integrations and automation.Skills & AbilitiesComprehensive knowledge of zero trust architecture principles and enterprise identity design patterns, including federation, SSO, OAuth 2.0/OIDC, and PAM.Strong command of security frameworks including NIST CSF, NIST 800-63, ISO 27001, and MITRE ATT&CK and CIS Controls v8, along with emerging OWASP guidance for AI/LLM and agentic systems (GenAI Security, LLM Top 10, AI Exchange) — and the ability to apply them practically, not just reference them.Proven ability to develop sophisticated security architectures that address complex business requirements, regulatory obligations, and enterprise risk across multiple technology domains.Exceptional communication and influencing skills — able to build alignment across engineering, product, and business stakeholders on complex architectural decisions.Comfortable operating in ambiguity; able to define structure, set priorities, and drive progress in a fast-moving, high-change global environment.Education & Experience10+ years of technical cybersecurity experience, with at least 7 years focused on identity security architecture in large, complex enterprise environments.Demonstrated success designing and maturing enterprise identity security programs — not just operating tools, but shaping strategy and standards at scale.If this job description resonates with you, we encourage you to apply even if you don’t meet all of the requirements below. We’re interested in getting to know you and what you bring to the table!Personalized benefits that support personal well-being and growth:JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health.About JLL –We’re JLL—a leading professional services and investment management firm specializing in real estate. We have operations in over 80 countries and a workforce of over 102,000 individuals around the world who help real estate owners, occupiers and investors achieve their business ambitions. As a global Fortune 500 company, we also have an inherent responsibility to drive sustainability and corporate social responsibility. That’s why we’re committed to our purpose to shape the future of real estate for a better world. We’re using the most advanced technology to create rewarding opportunities, amazing spaces and sustainable real estate solutions for our clients, our people, and our communities.Our core values of teamwork, ethics and excellence are also fundamental to everything we do and we’re honored to be recognized with awards for our success by organizations both globally and locally.Creating a diverse and inclusive culture where we all feel welcomed, valued and empowered to achieve our full potential is important to who we are today and where we’re headed in the future. And we know that unique backgrounds, experiences and perspectives help us think bigger, spark innovation and succeed together.