Senior Identity Security Architect

Job not on LinkedIn

🔥 1 hour ago

🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Jones Lang LaSalle Americas, Inc.

Jones Lang LaSalle Americas, Inc.

10,000+ employees

🏠 Real Estate

🤝 B2B

💼 Consulting

Real Estate • B2B • Consulting

Jones Lang LaSalle Americas, Inc. is a company that provides commercial real estate services for corporations and investors worldwide. Their focus is on helping clients save money, increase productivity, and improve sustainability in real estate operations.

📋 Description

• Define and own JLL's enterprise identity security architecture across IdP services, Active Directory, M365, cloud platforms, and third-party SaaS • Establish and maintain identity security policies and standards across user, non-person, on-premises, cloud, and SaaS identities • Partner with identity security, engineering, and operations teams to translate standards into engineering and operational direction • Lead JLL's zero trust strategy for user and third-party access • Shape the Customer Identity and Access Management architecture for externally facing digital products • Extend identity security architecture to machine identities, service accounts, AI, APIs, and modern authentication patterns • Define identity governance and administration strategies, entitlement models, access certification cadence, and joiner/mover/leaver standards • Define segregation-of-duties and least-privilege policies and translate them into enforceable entitlement structures • Architect JLL's Privileged Access Management strategy and provide direction for PAM tooling • Collaborate with threat management and insider threat teams on identity-aware detection and response • Partner with Active Directory, authentication, and cloud engineering teams to implement enforceable security controls • Serve as identity security subject matter expert for major programs, transformations, and acquisitions • Lead security architecture reviews and design governance processes • Mentor junior architects, engineers, developers, and security professionals • Lead cross-functional security initiatives and support secure development training and awareness programs

🎯 Requirements

• 10+ years of technical cybersecurity experience • At least 7 years focused on identity security architecture in large, complex enterprise environments • Hands-on architectural experience with enterprise IdP platforms, especially Okta • Experience with Privileged Access Management solutions, especially CyberArk • Experience securing identity across M365, AWS/Azure, SaaS applications, and on-premises infrastructure • Experience implementing Active Directory governance models, including hybrid AD/Entra ID sync architecture, delegation and privilege-escalation attack paths, and tiered administrative models • Experience designing identity-aware detection capabilities with threat management, insider threat, and incident response teams • Experience architecting non-person and machine-to-machine access, including service accounts, workload identity, and OAuth delegation patterns • Comprehensive knowledge of zero trust architecture, federation, SSO, OAuth 2.0/OIDC, and PAM • Strong command of NIST CSF, NIST 800-63, ISO 27001, MITRE ATT&CK, CIS Controls v8, and OWASP AI/LLM guidance • Ability to develop sophisticated security architectures addressing business requirements, regulatory obligations, and enterprise risk • Exceptional communication and influencing skills • Ability to operate in ambiguity and drive progress in a fast-moving global environment

🏖️ Benefits

• Equal opportunity employment • Reasonable accommodations for individuals with disabilities

Apply Now

Similar Jobs

🕒 3 days ago

CONVOTIS

501 - 1000

🤝 B2B

☁️ SaaS

Project Manager de ciberseguridad gestionando proyectos estratégicos de seguridad de la información para CONVOTIS Iberia. Coordinando equipos, riesgos, cumplimiento, proveedores, presupuesto y entregables.

🗣️🇪🇸 Spanish Required

AWS

Azure

Google Cloud Platform

PMP

🕒 September 16

Logicalis Spain

1001 - 5000

💼 Consulting

Técnico/a PAM CyberArk administrando cuentas privilegiadas, credenciales y Safes. Soporte de servicios gestionados de ciberseguridad para un cliente financiero de Logicalis Spain.

🗣️🇪🇸 Spanish Required

Linux

Vault

🕒 September 16

pasiona

51 - 200

💼 Consulting

📦 Logistics

🏭 Manufacturing

Technical Project Consultant implementing MTSB cybersecurity dashboards in Qualys for Pasiona Consulting clients. Coordinating requirements, providers, testing, validation, and acceptance.

🗣️🇪🇸 Spanish Required

Cyber Security

🕒 August 21

MWDN

51 - 200

💼 Consulting

📦 Logistics

🏥 Healthcare

Security Researcher probing browser and mobile threats for a passwordless IAM platform. Turning attacker techniques into fraud, automation, and AI-agent detection signals.

Android

Cyber Security

iOS

Java

JavaScript

Kotlin

Objective-C

Python

Swift

TypeScript

🕒 August 21

Wiz

201 - 500

🔒 Cybersecurity

Security Engineer securing Wiz’s cloud and AI security products. Building cloud, Kubernetes, vulnerability-management, and detection-response controls.

AWS

Azure

Cloud

Google Cloud Platform

Kubernetes

Python

Terraform

Go