Head of Identity, Access and Authentication Services

We are seeking an experienced Head of ApplicationServices, reporting to the SVP of Infrastructure and Operations. As a senior member of staff in Infrastructure and Operations within IT, this individual is responsible for standardizing and scaling the Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL — building a future-fit applicationservicesorganization that delivers resilient, secure, and adaptable identity and access capabilities across the enterprise. The scope of this role is expected to grow over time toencompassadditionalproducts and capabilities within the broader IAM, Authentication, and Authorization ecosystem as JLL’s technology landscape evolves.
 

The Head of ApplicationServicesbrings experience, knowledge, and future vision for transforming the identity and access management function, including the standardization of IAM platforms, authentication protocols, authorization frameworks, Active Directory governance, and adjacent identity and access technologies across JLL’s global environment. The role encompassestier1, 2 and 3 support of tooling and tier 3 support for identity and access infrastructure.

The role holder is a senior stakeholder in all relationships with externally sourced identity and access management capabilities. Owns the direct points of contact and continuous engagement and improvement with Applications Teams.

As a key member of the senior I&O leadership team, this role contributes to the development and execution of the enterprise-wide Infrastructure and ApplicationServicesstrategy and is responsible for ensuring I&O strategy is fully aligned, positioning I&O to deliver compelling value to the application teams as well as the JLL Business.
 

This individual is expected to support the SVP of I&O, the Infrastructure Leadership peer group, the Chief Architect and VPs of ApplicationServicesunder the CTO by implementing identity and access solutions that align to the enterprise architecture framework and roadmap. He or she will also serve on IT planning and policymaking committees and will drive the development and adoption of enterprise technology standards, governanceprocessesand performance metrics.

As AI agents and non-human identities become first-class actors in enterprise environments, this role willbe responsible forevolving JLL’s IAM strategy beyond traditional human-centric models. The ideal candidate will have experience designing dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated workloads. This individual willestablishgovernance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven systems, while partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.
 

Key Responsibilities

• Evolve IAM for AI agents and non-human identities:Lead the evolution of JLL’s IAM strategy to address the growing presence of AI agents, service accounts, and automated workloads as first-class actors in the enterprise. Design and implement dynamic, context-aware access controls — including purpose-based and just-in-time authorization — for agentic and automated systems. Establish governance frameworks that ensure trust delegation, auditability, and least-privilege principles aremaintainedacross AI-driven environments, partnering with security and engineering teams to build behavioral baselines and enforce policy at runtime.

• Standardize and expand IAM, Authentication, Authorization, and Active Directory:Define and drive the enterprise-wide standardization of Identity Access Management, Authentication, Authorization, and Active Directory functions across JLL. Establish consistent platforms, policies, and operating models that reduce fragmentation and improve security posture globally. Position the function to absorb and governadditionalIAM-adjacent products and capabilities as JLL’s identity landscape grows and matures.

• Create and execute strategy:Create and communicate a pioneering vision for ApplicationServiceswithin the identity and access management domain, including the value proposition in digital transformation, optimization of cloud-based identity services, and adoption of innovative technologies such as generative AI and zero-trust frameworks.

• Optimize, redesign, and deliver engagement models for ApplicationServices:Streamline engagement practices, enable a compelling digital employee experience, and improve the value the enterprise receives from IAM, authentication, authorization, and Active Directory platforms and services.

• Champion innovation:Take advantage of breakthrough technologies by embracing and driving automation, observability, and modern identity standards such as OAuth 2.0, SAML, OpenID Connect, andpasswordlessauthentication.

• Manage andoptimizecloud and hybrid identity environment:Create and execute strategies for cloud, hybrid, and on-premises identity infrastructure, and maximize the value the enterprise receives from investments in identity and access platforms and services.

• Develop and engage talent:Create future-proofingtalent strategies to develop, upskill, andretainan adaptive workforce amid the impact of generative AI and automation. Adopt leadership principles that engage teams and executives to change culture, build soft skills, and improvethe employeeexperience.

• Achieve operational excellence:Modernize to a cost-optimized, on-time, and stable identity and access management environment that addresses technical debt and minimizes risks of new initiatives. Build resilient platforms to power business growth.

• Drive and communicate outcomes:Build relationships and collaborate effectively across various levels of the organization. Able to convey complex technical concepts and strategies that resonate with technical and non-technical stakeholders.

• Define, Measure and Drive Success:Define the value of ApplicationServiceswithin the IAM domain, includingobjectives, metrics and KPIs, and track outcomes against goals, such as reducing identity-related risk andoptimizingcost.

• Drives the adoption of (and commitment towards) service improvements through a programmatic approach to continuous improvement which also measures impact and shares results.

• Continuously evaluates the business value of ApplicationServicesincluding the use of metrics such as Key Pe