Head of Identity, Access and Authentication Services (San Francisco)

JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. We are seeking an experienced Head of Identity, Access and Authentication, reporting to the SVP of Infrastructure and Operations. As a senior member of staff in Infrastructure and Operations within IT, this individual is responsible for standardizing and scaling the Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL — building a future-fit application services organization that delivers resilient, secure, and adaptable identity and access capabilities across the enterprise. The scope of this role is expected to grow over time to encompass additional products and capabilities within the broader IAM, Authentication, and Authorization ecosystem as JLL’s technology landscape evolves. The Head of Identity, Access and Authentication brings experience, knowledge, and future vision for transforming the identity and access management function, including the standardization of IAM platforms, authentication protocols, authorization frameworks, Active Directory governance, and adjacent identity and access technologies across JLL’s global environment. The role encompasses tier 1, 2 and 3 support of tooling and tier 3 support for identity and access infrastructure. The role holder is a senior stakeholder in all relationships with externally sourced identity and access management capabilities. Owns the direct points of contact and continuous engagement and improvement with Applications Teams. As a key member of the senior I&O leadership team, this role contributes to the development and execution of the enterprise-wide Infrastructure and Application Services strategy and is responsible for ensuring I&O strategy is fully aligned, positioning I&O to deliver compelling value to the application teams as well as the JLL Business. This individual is expected to support the SVP of I&O, the Infrastructure Leadership peer group, the Chief Architect and VPs of Application Services under the CTO by implementing identity and access solutions that align to the enterprise architecture framework and roadmap. He or she will also serve on IT planning and policymaking committees and will drive the development and adoption of enterprise technology standards, governance processes and performance metrics. As AI agents and non-human identities become first-class actors in enterprise environments, this role will be responsible for evolving JLL’s IAM strategy beyond traditional human-centric models. The ideal candidate will have experience designing dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated workloads. This individual will establish governance frameworks that ensure trust delegation, auditability, and least-privilege principles are maintained across AI-driven systems, while partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime. Key Responsibilities Evolve IAM for AI agents and non-human identities: Lead the evolution of JLL’s IAM strategy to address the growing presence of AI agents, service accounts, and automated workloads as first-class actors in the enterprise. Design and implement dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated systems. Establish governance frameworks that ensure trust delegation, auditability, and least-privilege principles are maintained across AI-driven environments, partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime. Standardize and expand IAM, Authentication, Authorization, and Active Directory: Define and drive the enterprise-wide standardization of Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL. Establish consistent platforms, policies, and operating models that reduce fragmentation and improve security posture globally. Position the function to absorb and govern additional IAM-adjacent products and capabilities as JLL’s identity landscape grows and matures. Create and execute strategy: Create and communicate a pioneering vision for Application Services within the identity and access management domain, including the value proposition in digital transformation, optimization of cloud-based identity services, and adoption of innovative technologies such as generative AI and zero-trust frameworks. Optimize, redesign, and deliver engagement models for Application Services: Streamline engagement practices, enable a compelling digital employee experience, and improve the value the enterprise receives from IAM, authentication, authorization, and Active Directory platforms and services. Champion innovation: Take advantage of breakthrough technologies by embracing and driving automation, observability, and modern identity standards such as OAuth 2.0, SAML, OpenID Connect, and passwordless authentication. Manage and optimize cloud and hybrid identity environment: Create and execute strategies for cloud, hybrid, and on-premises identity infrastructure, and maximize the value the enterprise receives from investments in identity and access platforms and services. Develop and engage talent: Create future-proofing talent strategies to develop, upskill, and retain an adaptive workforce amid the impact of generative AI and automation. Adopt leadership principles that engage teams and executives to change culture, build soft skills, and improve the employee experience. Achieve operational excellence: Modernize to a cost-optimized, on-time, and stable identity and access management environment that addresses technical debt and minimizes risks of new initiatives. Build resilient platforms to power business growth. Drive and communicate outcomes: Build relationships and collaborate effectively across various levels of the organization. Able to convey complex technical concepts and strategies that resonate with technical and non-technical stakeholders. Define, Measure and Drive Success: Define the value of Application Services within the IAM domain, including objectives, metrics and KPIs, and track outcomes against goals, such as reducing identity-related risk and optimizing cost. Drives the adoption of (and commitment towards) service improvements through a programmatic approach to continuous improvement which also measures impact and shares results. Continuously evaluates the business value of Application Services including the use of metrics such as Key Performance Indicators, Outcome Driven Metrics and Objectives and Key Results. Leadership Requirements Strategic Vision: Has a clear strategic vision, with the ability to develop and communicate an Application Services vision for identity and access that inspires and motivates staff and aligns with the IT and business strategy. Outstanding Communication: Exceptional communication skills and ability to effectively communicate complex concepts to various audiences, including board members, executives, technical teams, and non-technical staff; aptitude to facilitate collaboration and build relationships across business lines is critical. Able to articulate IAM and identity strategy approach to risk taking to nontechnical audiences in a way that increases sponsorship and support for ongoing endeavors. Business Acumen and Subject Matter Expertise: Strong business acumen, including industry, domain-specific knowledge of the enterprise and its business units. Deep understanding of current and emerging IAM, authentication, authorization, and Active Directory technologies and practices, and how other enterprises are employing them. Change Management: Skilled at driving cultural change; evangelizing and implementing transformational initiatives where the target state included zero-trust, cloud identity adoption at scale, and IAM standardization. Able to consolidate identity and access capabilities in large, complex enterprise organizations to deliver improved efficiency, while balancing customer preferences for agility. Team Leadership: Successful history of building and leading diverse teams; including fostering a collaborative, inclusive, and innovative work environment, as well as providing mentorship and professional development opportunities. Risk Management: Possess a deep understanding of risk management principles and methodologies; ability to assess and prioritize risks effectively, develop risk mitigation strategies, and ensure that in-place controls are aligned with governance and policy requirements, particularly in the context of identity and access security. Continuous Learning: Committed to continuous learning and staying up to date with the latest trends, technologies, and threats in the field of identity and access management. This includes obtaining relevant certifications, attending conferences, and actively participating in industry forums and networks. Ethical: Adheres to the highest ethical standards and demonstrates integrity by instilling a strong culture of ethical behavior within the Application Services function and across JLL. Additional Requirements Bachelor’s degree in Science or Engineering; Master’s degree preferred 10+ years of experience in Application Services or identity and access management, with at least 5 years in a senior leadership role, preferably in a technical capacity in IAM, cloud identity, or enterprise directory s