Head of Identity - Access and Authentication Services

We are seeking an experienced Head of Identity, Access and Authentication, reporting to the SVP of Infrastructure and Operations. As a senior member of staff in Infrastructure and Operations within IT, this individual is responsible for standardizing and scaling the Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL — building a future-fit applicationservicesorganization that delivers resilient, secure, and adaptable identity and access capabilities across the enterprise. The scope of this role is expected to grow over time toencompassadditionalproducts and capabilities within the broader IAM, Authentication, and Authorization ecosystem as JLL’s technology landscape evolves.
 

The Head of Identity, Access and Authentication brings experience, knowledge, and future vision for transforming the identity and access management function, including the standardization of IAM platforms, authentication protocols, authorization frameworks, Active Directory governance, and adjacent identity and access technologies across JLL’s global environment. The role encompassestier1, 2 and 3 support of tooling and tier 3 support for identity and access infrastructure. 

The role holder is a senior stakeholder in all relationships with externally sourced identity and access management capabilities. Owns the direct points of contact and continuous engagement and improvement with Applications Teams.

As a key member of the senior I&O leadership team, this role contributes to the development and execution of the enterprise-wide Infrastructure and ApplicationServicesstrategy and is responsible for ensuring I&O strategy is fully aligned, positioning I&O to deliver compelling value to the application teams as well as the JLL Business.
 

This individual is expected to support the SVP of I&O, the Infrastructure Leadership peer group, the Chief Architect and VPs of ApplicationServicesunder the CTO by implementing identity and access solutions that align to the enterprise architecture framework and roadmap. He or she will also serve on IT planning and policymaking committees and will drive the development and adoption of enterprise technology standards, governanceprocessesand performance metrics.

As AI agents and non-human identities become first-class actors in enterprise environments, this role willbe responsible forevolving JLL’s IAM strategy beyond traditional human-centric models. The ideal candidate will have experience designing dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated workloads. This individual willestablishgovernance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven systems, while partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.
 

Key Responsibilities

• Evolve IAM for AI agents and non-human identities:Lead the evolution of JLL’s IAM strategy to address the growing presence of AI agents, service accounts, and automated workloads as first-class actors in the enterprise. Design and implement dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated systems. Establish governance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven environments, partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.

• Standardize and expand IAM, Authentication, Authorization, and Active Directory:Define and drive the enterprise-wide standardization of Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL. Establish consistent platforms, policies, and operating models that reduce fragmentation and improve security posture globally. Position the function to absorb and governadditionalIAM-adjacent products and capabilities as JLL’s identity landscape grows and matures.

• Create and execute strategy:Create and communicate a pioneering vision for ApplicationServiceswithin the identity and access management domain, including the value proposition in digital transformation, optimization of cloud-based identity services, and adoption of innovative technologies such as generative AI and zero-trust frameworks.

• Optimize, redesign, and deliver engagement models for ApplicationServices:Streamline engagement practices, enable a compelling digital employee experience, and improve the value the enterprise receives from IAM, authentication, authorization, and Active Directory platforms and services.

• Champion innovation:Take advantage of breakthrough technologies by embracing and driving automation, observability, and modern identity standards such as OAuth 2.0, SAML, OpenID Connect, andpasswordlessauthentication.

• Manage andoptimizecloud and hybrid identity environment:Create and execute strategies for cloud, hybrid, and on-premises identity infrastructure, and maximize the value the enterprise receives from investments in identity and access platforms and services.

• Develop and engage talent:Create future-proofingtalent strategies to develop, upskill, andretainan adaptive workforce amid the impact of generative AI and automation. Adopt leadership principles that engage teams and executives to change culture, build soft skills, and improvethe employeeexperience.

• Achieve operational excellence:Modernize to a cost-optimized, on-time, and stable identity and access management environment that addresses technical debt and minimizes risks of new initiatives. Build resilient platforms to power business growth.

• Drive and communicate outcomes:Build relationships and collaborate effectively across various levels of the organization. Able to convey complex technical concepts and strategies that resonate with technical and non-technical stakeholders.

• Define, Measure and Drive Success:Define the value of ApplicationServiceswithin the IAM domain, includingobjectives, metrics and KPIs, and track outcomes against goals, such as reducing identity-related risk andoptimizingcost.

• Drives the adoption of (and commitment towards) service improvements through a programmatic approach to continuous improvement which also measures impact and shares results.

• Continuously evaluates the business value of ApplicationServicesincluding the use of metrics such as Key Performance Indicators, Outcome Driven Metrics and Objectives and Key Results.
   

Leadership Requirements

• Strategic Vision:Has a clear strategic vision, with the ability to develop and communicate an ApplicationServicesvision for identity and access that inspires and motivates staff and aligns with the IT and business strategy.

• Outstanding Communication:Exceptional communication skills and ability to effectively communicate complex concepts to various audiences, including board members, executives, technical teams, and non-technical staff; aptitude tofacilitatecollaboration and build relationships across business lines is critical. Able to articulate IAM and identity strategy approach to risk taking to nontechnical audiences in a way that increases sponsorship and support for ongoing endeavors.

• Business Acumen and Subject Matter Expertise:Strong business acumen, including industry, domain-specific knowledge of the enterprise and its business units. Deep understanding of current and emerging IAM, authentication, authorization, and Active Directory technologies and practices, and how other enterprises are employing them.

• Change Management:Skilled at driving cultural change; evangelizing and implementing transformational initiatives where the target stateincludedzero-trust, cloud identity adoption at scale, and IAM standardization. Able toconsolidateidentity and access capabilities in large, complex enterprise organizations to deliver improved efficiency, while balancing customer preferences for agility.

• Team Leadership:Successful history of building and leading diverse teams; including fostering a collaborative, inclusive, and innovative work environment, as well as providing mentorship and professional development opportunities.

• Risk Management:Possess a deep understanding of risk management principles and methodologies; ability to assess and prioritize risks effectively, develop risk mitigation strategies, and ensure that in-place controls are aligned with governance and policy requirements, particularly in the context of identity and access security.

• Continuous Learning:Committed to continuous learning and staying up to date with the latest trends, technologies, and threats in the field of identity and accessmanagement. This includes obtaining relevant certifications, attending conferences, and activelyparticipatingin industry forums and networks.

• Ethical:Adheres to the highest ethical standards anddemonstratesintegrity by instilling a strong culture of ethical behavior within the ApplicationServicesfunction and across JLL.
   

Additional Requirements

• Bachelor’s degreein Science or Engineering;Master’sdegree preferred

• 10+ years of experience inApplicationServicesor identity and access management, with at least 5 years in a senior leadership role, preferably in a technical capacity in IAM, cloud identity, or enterprise directory services

• Strong knowledge of current and emerging technologies, including Identity Access Management platforms (e.g., SailPoint, Saviynt, Okta, Azure AD), authentication protocols (SAML, OAuth 2.0, OpenID Connect), authorization frameworks, Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Active Directory/Azure Active Directory, with an understanding of related IT security strategies; comfort expanding scope to adjacent IAM products as needed

• Experience designing identity and access governance for non-human identities, AI agents, and automated workloads, including just-in-time access, purpose-based authorization, and least-privilege enforcement at runtime

• Strategic thinker with a proventrack recordof implementing large-scale IT initiatives

• Strong analytical and problem-solving abilities

• Experience as a collaborative and influential leader instilling confidence among stakeholders in FORTUNE 500 environments

• Established reputation as a bold thinking, progressive executiveexhibitingstrong levels of insight and exceeding stakeholders’ expectations

• Transformational leader who leads change with energy and resilience to propel the business forward; has the courage to make complex decisions and take calculated risks; adjusts style to accommodate individuals and the various phases of growth