Senior Identity Security Architect

JLL; Madrid; Presencial; EUR 110.000 - 170.000; Jornada completa

Descripción de la vacante

JLL is seeking a Senior Identity Security Architect to shape the strategy and standards for identity security across the enterprise. You will partner with engineering and product teams to design zero trust, CIAM, and privileged access governance at scale.

The role requires defining policy, leading architecture reviews, and guiding cross-functional teams to implement secure identity controls across on-premises and cloud environments.

Formación

• Extensive experience in security architecture for large enterprises.
• Proven ability to define enterprise identity security strategy and standards.
• Strong leadership and cross-functional collaboration skills.

Responsabilidades

• Define and own enterprise identity security architecture spanning IdP services (Okta or Entra), AD, M365, and cloud platforms.
• Lead zero trust strategy for user and third-party access.
• Shape CIAM for externally-facing digital products and partner integrations.
• Architect Privileged Access Management controls and governance.
• Mentor security engineers and architects and communicate complex concepts to stakeholders.

Conocimientos

Identity strategy

Security architecture

Zero trust

CIAM

Privileged access

Leadership

Educación

Bachelor's degree in CS/Security

Herramientas

Okta

Entra

Active Directory

M365

AWS/Azure

CyberArk

Descripción del empleo

JLL empowers you to shape a brighter way .

Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you've got deep experience in commercial real estate, skilled trades or technology, or you're looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.

JLL es una empresa comprometida con la igualdad de oportunidades entre hombres y mujeres / JLL as a company is committed to equal opportunities for men and women.

Senior Identity Security Architect

Level: P4 | Job Discipline: Security Architecture

Overview

At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. As our Senior Identity Security Architect, you'll be shaping the strategy that defines how 100,000+ employees, clients, and partners authenticate, access, and interact with JLL's global technology ecosystem. This is a high-impact architecture role. You will be responsible for setting direction, establishing standards, and partnering with engineering and product teams to ensure that identity security is designed correctly from the ground up. From zero trust frameworks to privileged access governance to customer identity in JLL's digital products, your architectural decisions will directly shape JLL's security posture at enterprise scale.

If you're a strategic thinker with deep identity expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you.

Essential Duties and Responsibilities

Identity Strategy & Architecture

• Define and own JLL's enterprise identity security architecture spanning IdP services (Okta or Entra preferred), Active Directory, M365, cloud platforms (AWS/Azure), and third-party SaaS.
• Ensuring a coherent, scalable, and secure design across the global technology estate.
• Establish and maintain identity security policy and standards across users, non-person accounts, and on-premises, cloud, and SaaS platforms, in partnership with key identity stakeholders.
• Partner with Identity Security, Engineering, and operations teams to develop to translate standards and patterns into actionable engineering and operational direction.
• Lead JLL's zero trust strategy for user and third-party access in close partnership with the network security organization, driving architectural decisions that eliminate implicit trust across the environment.
• Shape the architectural vision for Customer Identity and Access Management (CIAM) within JLL's externally-facing digital products, ensuring secure and seamless experiences for clients and partners.
• Extend identity security architecture beyond the human user scope and into NHI landscapes for machine identity and service accounts including creation of AI, API, and other modern auth patterns and standards.

Identity Governance & Administration

• Architecture coverage for JLL's identity governance and administration strategy across different identity platforms, assisting in defining entitlement models, access certification and review cadence, and joiner/mover/leaver lifecycle standards and management.
• Assist in defining segregation-of-duties and least-privilege policy for toxic-combination detection, and partner with application and platform owners to translate that policy into enforceable entitlement structures and operating models.

Privileged Access Governance

• Architect JLL's Privileged Access Management strategy, defining controls for privileged accounts that minimize abuse potential and enable robust detection of insider and external threats.
• Provide strategic direction to engineering teams operating JLL's PAM tooling (CyberArk preferred), ensuring the platform evolves to meet emerging threat and business requirements.
• Collaborate with cyber threat management and insider threat teams to embed identity-aware detection and response capabilities across the enterprise.

Cross-Functional Leadership & Influence

• Partner with Active Directory, authentication, and cloud engineering teams to translate security architecture into enforceable controls and compliant implementations.
• Serve as the identity security subject matter expert on major programs, technology transformations, and acquisitions. Bring architectural clarity to complex, multi-stakeholder initiatives.
• Lead security architecture reviews and design governance processes; mentor junior architects and security professionals across the team.
• Communicate advanced security architecture strategies and design rationale clearly to diverse audiences from engineering teams to senior business stakeholders.

Mentorship & Team Leadership

• Provide technical guidance and mentoring to junior security engineers, developers, and architects on application