Level: P4 | Job Discipline: Security Architecture

Overview

At JLL, we're reimagining how the world's most complex real estate environments are secured, operated, and experienced. As our Senior Identity Security Architect, you'll be shaping the strategy that defines how 100,000+ employees, clients, and partners authenticate, access, and interact with JLL's general technology ecosystem. This is a high-impact architecture role. You will be responsible for setting direction, establishing standards, and partnering with engineering and product teams to ensure that identity security is designed correctly from the ground up. From zero trust frameworks to privileged access governance to customer identity in JLL’s digital products, your architectural decisions will directly shape JLL’s security posture at enterprise scale.
If you’re a strategic thinker with deep identity expertise who thrives in a large, dynamic environment and wants their work to have real, visible impact, we want to hear from you.

Essential Duties And Responsibilities

Identity Strategy & Architecture

- Define and own JLL's enterprise identity security architecture spanning IdP services (Okta or Entra preferred), Active Directory, M365, cloud platforms (AWS/Azure), and third-party SaaS.
- Ensuring a coherent, scalable, and secure design across the global technology estate.
- Establish and maintain identity security policy and standards across users, non-person accounts, and on-premises, cloud, and SaaS platforms, in partnership with key identity stakeholders.
- Partner with Identity Security, Engineering, and operations teams to develop to translate standards and patterns into actionable engineering and operational direction.




- Lead JLL's zero trust strategy for user and third-party access in close partnership with the network security organization, driving architectural decisions that eliminate implicit trust across the environment.
- Shape the architectural vision for Customer Identity and Access Management (CIAM) within JLL's externally-facing digital products, ensuring secure and seamless experiences for clients and partners.
- Extend identity security architecture beyond the human user scope and into NHI landscapes for machine identity and service accounts including creation of AI, API, and other modern auth patterns and standards.

Identity Governance & Administration

- Architecture coverage for JLL's identity governance and administration strategy across different identity platforms, assisting in defining entitlement models, access certification and review cadence, and joiner/mover/leaver lifecycle standards and management.
- Assist in defining segregation-of-duties and least-privilege policy for toxic-combination detection, and partner with application and platform owners to translate that policy into enforceable entitlement structures and operating models.

Privileged Access Governance

- Architect JLL's Privileged Access Management strategy, defining controls for privileged accounts that minimize abuse potential and enable robust detection of insider and external threats.




- Provide strategic direction to engineering teams operating JLL's PAM tooling (CyberArk preferred), ensuring the platform evolves to meet emerging threat and business requirements.
- Collaborate with cyber threat management and insider threat teams to embed identity-aware detection and response capabilities across the enterprise.

Cross-Functional Leadership & Influence

- Partner with Active Directory, authentication, and cloud engineering teams to translate security architecture into enforceable controls and compliant implementations.
- Serve as the identity security subject matter expert on major programs, technology transformations, and acquisitions. Bring architectural clarity to complex, multi-stakeholder initiatives.
- Lead security architecture reviews and design governance processes; mentor junior architects and security professionals across the team.
- Communicate advanced security architecture strategies and design rationale clearly to diverse audiences from engineering teams to senior business stakeholders.

Mentorship & Team Leadership

- Provide technical guidance and mentoring to junior security engineers, developers, and architects on application security principles, secure coding practices, and architectural standards.
- Lead cross-functional security initiatives, driving collaborative approaches to security integration across development and architecture teams.
- Support secure development training and awareness programs to build security competency across engineering organizations.

Required Knowledge, Skills, And Abilities

Technical Knowledge

- Hands-on architectural experience with enterpri

📌 Senior Identity Security Architect (Madrid)
🏢 JLL
📍 Madrid