Strategic Identity Security Architect - Zero Trust & PAM

JLL; Madrid; On-site; EUR 90,000 - 120,000; Full time

Job summary

JLL is seeking a Senior Identity Security Architect to shape strategy for authenticating and authorizing 100,000+ users, clients, and partners across the global technology estate.

You will define standards for IdP services (Okta or Entra), AD and cloud platforms, lead zero trust initiatives, and drive customer identity in digital products while mentoring engineers and ensuring secure, scalable design.

Qualifications

• 10+ years of technical cybersecurity experience in enterprise environments.
• Expertise in identity security architecture, zero trust, and IAM design.
• Experience with IdP platforms (Okta/Entra) and PAM tooling (CyberArk).
• Strong collaboration with security, engineering, and product teams; effective governance.

Responsibilities

• Define enterprise identity security architecture across IdP, AD, cloud, and SaaS.
• Lead zero trust strategy for user and third-party access.
• Shape CIAM strategy for externally facing products.
• Partner with security, engineering, and operations to translate standards into direction.
• Mentor architects and lead security governance processes.
• Drive identity governance and provisioning lifecycle standards.

Skills

Identity security architecture

Zero trust

Okta

Entra ID

Active Directory governance

CIAM

OAuth delegation patterns

Threat management collaboration

Non-person & machine identity

Tools

CyberArk

Job description

JLL is seeking a Senior Identity Security Architect to shape strategy for authenticating and authorizing 100,000+ users, clients, and partners across the global technology estate.

You will define standards for IdP services (Okta or Entra), AD and cloud platforms, lead zero trust initiatives, and drive customer identity in digital products while mentoring engineers and ensuring secure, scalable design.