IAM Architect

JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented peopleand empowering them tothrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. We are seeking an experienced Head of Identity, Access and Authentication, reporting to the SVP of Infrastructure and Operations. As a senior member of staff in Infrastructure and Operations within IT, this individual is responsible for standardizing and scaling the Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL — building a future-fit applicationservicesorganization that delivers resilient, secure, and adaptable identity and access capabilities across the enterprise. The scope of this role is expected to grow over time toencompassadditionalproducts and capabilities within the broader IAM, Authentication, and Authorization ecosystem as JLL’s technology landscape evolves.The Head of Identity, Access and Authentication brings experience, knowledge, and future vision for transforming the identity and access management function, including the standardization of IAM platforms, authentication protocols, authorization frameworks, Active Directory governance, and adjacent identity and access technologies across JLL’s global environment. The role encompassestier1, 2 and 3 support of tooling and tier 3 support for identity and access infrastructure.The role holder is a senior stakeholder in all relationships with externally sourced identity and access management capabilities. Owns the direct points of contact and continuous engagement and improvement with Applications Teams.As a key member of the senior I&O leadership team, this role contributes to the development and execution of the enterprise-wide Infrastructure and ApplicationServicesstrategy and is responsible for ensuring I&O strategy is fully aligned, positioning I&O to deliver compelling value to the application teams as well as the JLL Business.This individual is expected to support the SVP of I&O, the Infrastructure Leadership peer group, the Chief Architect and VPs of ApplicationServicesunder the CTO by implementing identity and access solutions that align to the enterprise architecture framework and roadmap. He or she will also serve on IT planning and policymaking committees and will drive the development and adoption of enterprise technology standards, governanceprocessesand performance metrics.As AI agents and non-human identities become first-class actors in enterprise environments, this role willbe responsible forevolving JLL’s IAM strategy beyond traditional human-centric models. The ideal candidate will have experience designing dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated workloads. This individual willestablishgovernance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven systems, while partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.Key ResponsibilitiesEvolve IAM for AI agents and non-human identities:Lead the evolution of JLL’s IAM strategy to address the growing presence of AI agents, service accounts, and automated workloads as first-class actors in the enterprise. Design and implement dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated systems. Establish governance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven environments, partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.Standardize and expand IAM, Authentication, Authorization, and Active Directory:Define and drive the enterprise-wide standardization of Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL. Establish consistent platforms, policies, and operating models that reduce fragmentation and improve security posture globally. Position the function to absorb and governadditionalIAM-adjacent products and capabilities as JLL’s identity landscape grows and matures.Create and execute strategy:Create and communicate a pioneering vision for ApplicationServiceswithin the identity and access management domain, including the value proposition in digital transformation, optimization of cloud-based identity services, and adoption of innovative technologies such as generative AI and zero-trust frameworks.Optimize, redesign, and deliver engagement models for ApplicationServices:Streamline engagement practices, enable a compelling digital employee experience, and improve the value the enterprise receives from IAM, authentication, authorization, and Active Directory platforms and services.Champion innovation:Take advantage of breakthrough technologies by embracing and driving automation, observability, and modern identity standards such as OAuth 2.0, SAML, OpenID Connect, andpasswordlessauthentication.Manage andoptimizecloud and hybrid identity environment:Create and execute strategies for cloud, hybrid, and on-premises identity infrastructure, and maximize the value the enterprise receives from investments in identity and access platforms and services.Develop and engage talent:Create future-proofingtalent strategies to develop, upskill, andretainan adaptive workforce amid the impact of generative AI and automation. Adopt leadership principles that engage teams and executives to change culture, build soft skills, and improvethe employeeexperience.Achieve operational excellence:Modernize to a cost-optimized, on-time, and stable identity and access management environment that addresses technical debt and minimizes risks of new initiatives. Build resilient platforms to power business growth.Drive and communicate outcomes:Build relationships and collaborate effectively across various levels of the organization. Able to convey complex technical concepts and strategies that resonate with technical and non-technical stakeholders.Define, Measure and Drive Success:Define the value of ApplicationServiceswithin the IAM domain, includingobjectives, metrics and KPIs, and track outcomes against goals, such as reducing identity-related risk andoptimizingcost.Drives the adoption of (and commitment towards) service improvements through a programmatic approach to continuous improvement which also measures impact and shares results.Continuously evaluates the business value of ApplicationServicesincluding the use of metrics such as Key Performance Indicators, Outcome Driven Metrics and Objectives and Key Results.Leadership RequirementsStrategic Vision:Has a clear strategic vision, with the ability to develop and communicate an ApplicationServicesvision for identity and access that inspires and motivates staff and aligns with the IT and business strategy.Outstanding Communication:Exceptional communication skills and ability to effectively communicate complex concepts to various audiences, including board members, executives, technical teams, and non-technical staff; aptitude tofacilitatecollaboration and build relationships across business lines is critical. Able to articulate IAM and identity strategy approach to risk taking to nontechnical audiences in a way that increases sponsorship and support for ongoing endeavors.Business Acumen and Subject Matter Expertise:Strong business acumen, including industry, domain-specific knowledge of the enterprise and its business units. Deep understanding of current and emerging IAM, authentication, authorization, and Active Directory technologies and practices, and how other enterprises are employing them.Change Management:Skilled at driving cultural change; evangelizing and implementing transformational initiatives where the target stateincludedzero-trust, cloud identity adoption at scale, and IAM standardization. Able toconsolidateidentity and access capabilities in large, complex enterprise organizations to deliver improved efficiency, while balancing customer preferences for agility.Team Leadership:Successful history of building and leading diverse teams; including fostering a collaborative, inclusive, and innovative work environment, as well as providing mentorship and professional development opportunities.Risk Management:Possess a deep understanding of risk management principles and methodologies; ability to assess and prioritize risks effectively, develop risk mitigation strategies, and ensure that in-place controls are aligned with governance and policy requirements, particularly in the context of identity and access security.Continuous Learning:Committed to continuous learning and staying up to date with the latest trends, technologies, and threats in the field of identity and accessmanagement. This includes obtaining relevant certifications, attending conferences, and activelyparticipatingin industry forums and networks.Ethical:Adheres to the highest ethical standards anddemonstratesintegrity by instilling a strong culture of ethical behavior within the ApplicationServicesfunction and across JLL.Additional RequirementsBachelor’s degreein Science or Engineering;Master’sdegree preferred10+ years of experience inApplicationServicesor identity and access management, with at least 5 years in a senior leadership role, preferably in a technical capacity in IAM, cloud identity, or enterprise directory servicesStrong knowledge of current and emerging technologies, including Identity Access Management platforms (e.g., SailPoint, Saviynt, Okta, Azure AD), authentication protocols (SAML, OAuth 2.0, OpenID Connect), authorization frameworks, Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Active Directory/Azure Active Directory, with an understanding of related IT security strategies; comfort expanding scope to adjacent IAM products as neededExperience designing identity and access governance for non-human identities, AI agents, and automated workloads, including just-in-time access, purpose-based authorization, and least-privilege enforcement at runtimeStrategic thinker with a proventrack recordof implementing large-scale IT initiativesStrong analytical and problem-solving abilitiesExperience as a collaborative and influential leader instilling confidence among stakeholders in FORTUNE 500 environmentsEstablished reputation as a bold thinking, progressive executiveexhibitingstrong levels of insight and exceeding stakeholders’ expectationsTransformational leader who leads change with energy and resilience to propel the business forward; has the courage to make complex decisions and take calculated risks; adjusts style to accommodate individuals and the various phases of growthJLL is an Equal Opportunity EmployerJLL is committed to developing and maintaining a diverse workforce and strongly believes in equal opportunity extended to all individuals in all aspects of the employment relationship. Please visit for additional information on JLL's commitment to equal opportunity.This position does not provide visa sponsorship. Candidates must be authorized to work in the United States without sponsorship.Estimated compensation for this position:190,000.00 – 280,000.00 USD per yearThis range is an estimate and actual compensation may differ. Final compensation packages are determined by various considerations including but not limited to candidate qualifications, location, market conditions, and internal considerations.Location:On-site –Chicago, IL, San Francisco, CAIf this job description resonates with you, we encourage you to apply, even if you don’t meet all the requirements. We’re interested in getting to know you and what you bring to the table!Personalized benefits that support personal well-being and growth:JLL recognizes the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritizes mental, physical and emotional health. Some of these benefits may include:401(k) plan with matching company contributionsComprehensive Medical, Dental & Vision CarePaid parental leave at 100% of salaryPaid Time Off and Company HolidaysEarly access to earned wages through Daily PayAt JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you'repursuing.JLL Privacy NoticeJones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely.For more information about how JLL processes your personal data, please view our Candidate Privacy Statement.For additional details please see our career site pages for each country.For candidates in the United States, please see a full copy of our Equal Employment Opportunity policy here.Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL.Pursuant to the Arizona Civil Rights Act, criminal convictions are not an absolute bar to employment.Pursuant to Illinois Law, applicants are not obligated to disclose sealed or expunged records of conviction or arrest.Pursuant to Columbia, SC ordinance, this position is subject to a background check for any convictions directly related to its duties and responsibilities. Only job-related convictions will be considered and will not automatically disqualify the candidate.California Residents onlyIf you are a California resident as defined in the California Consumer Privacy Act (CCPA) please view ourSupplemental Privacy Statement which describes your rights and disclosures about your personal information.If you are viewing this on a mobile device you may want to view the CCPA version on a larger device.Pursuant to the Los Angeles Fair Chance Initiative for Hiring Ordinance, JLL will consider for employment all qualified Applicants, including those with Criminal Histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Accepting applications on an ongoing basis until candidate identified.SummaryLocation: Chicago, IL; San Francisco, CAType: Full time