Head of Identity, Access and Authentication Services

JLL (Jones Lang LaSalle)

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Chicago, ILSan Francisco, CA
Salary
$190,000–$225,000 / yr
Employment
Full-time
Posted
3 days ago
Freshness
Confirmed live today
Closes
Dec 14, 2026

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $197k
This role $208k
$138k $248k
below market most similar roles pay here above market

This role pays more than 58% of similar roles. Most pay $164,650–$229,700 — the blue band above. At the midpoint, this role pays about $208k versus about $197k for comparable roles.

Based on 240 similar postings.

Employer

About JLL (Jones Lang LaSalle)

JLL (Jones Lang LaSalle) is a global professional services firm specializing in real estate and investment management, providing services to buyers, sellers, tenants, landlords, investors, and developers. Industry: Commercial Real Estate Services

JLL (Jones Lang LaSalle) currently has 28 open roles on FindRole.

Listed pay typically runs $161,350–$200,000 across 22 roles with salary data.

Most-posted roles

View all roles at JLL (Jones Lang LaSalle)

At a glance

TL;DR · Head of Identity, Access and Authentication Services

The Head of Identity, Access and Authentication Services joins the Infrastructure and Operations team to lead the standardization and scaling of Identity Access Management, Authentication, Authorization, and Active Directory functions. This role involves building a future-fit application services organization by developing resilient, secure, and adaptable identity capabilities across the global enterprise. Key responsibilities include managing tier 1, 2, and 3 support for identity infrastructure, establishing governance for non-human identities and AI agents, and designing context-aware access controls like just-in-time authorization. The position requires expertise in technologies such as SailPoint, Saviynt, Okta, Azure AD, SAML, OAuth 2.0, OpenID Connect, and MFA. The role addresses the technical challenge of evolving IAM strategies beyond human-centric models to secure automated workloads while maintaining least-privilege principles and auditability.

What you'll do

  • Standardize and scale Identity Access Management, Authentication, Authorization, and Active Directory functions across the global enterprise.
  • Lead the evolution of IAM strategy to support AI agents, service accounts, and automated non-human identities.
  • Design and implement dynamic, context-aware access controls including purpose-based and just-in-time authorization.
  • Establish governance frameworks to ensure trust delegation, auditability, and least-privilege principles for AI-driven systems.
  • Create and execute a long-term vision for Application Services including cloud identity and zero-trust frameworks.
  • Manage and optimize cloud, hybrid, and on-premises identity infrastructure to maximize business value.
  • Define and track key performance indicators and metrics to measure the success of identity-related risk reduction and cost optimization.
  • Provide tier 1, 2, and 3 support for identity and access infrastructure and tooling.

What we're looking for

  • Bachelor’s degree in Science or Engineering.
  • Master’s degree (preferred).
  • 10+ years of experience in Application Services or identity and access management.
  • At least 5 years of experience in a senior leadership role, preferably in a technical capacity in IAM, cloud identity, or enterprise directory services.
  • Strong knowledge of IAM platforms (e.g., SailPoint, Saviynt, Okta, Azure AD), authentication protocols (SAML, OAuth 2.0, OpenID Connect), and Active Directory.
  • Experience designing identity and access governance for non-human identities, AI agents, and automated workloads.
  • Proven track record of implementing large-scale IT initiatives and leading change in FORTUNE 500 environments.

More like this

Similar roles

Senior Principal Enterprise Identity & Access Management Architect

Cigna

Bloomfield, CT 4 days ago $174,800–$291,300
IAM IGA PAM CIAM Zero Trust CyberArk Okta Ping Identity SailPoint Microsoft Entra ID SAML OAuth 2.0 OpenID Connect SCIM LDAP Kerberos FIDO2 AWS Azure GCP PowerShell Python Infrastructure-as-Code API Security
10+ yrs exp Hybrid

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +1 1 day ago $86,800–$198,000
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management
5+ yrs exp

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +2 37 days ago
Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management root‑cause analysis
5+ yrs exp

AI Identity and Access Management Consulting Director

CNA Financial

Chicago, IL 46 days ago $97,000–$189,000
Identity & Access Management (IAM) AI GenAI Okta SailPoint CyberArk Cloud IAM RBAC ABAC Automation Orchestration Identity Governance Security Architecture
10+ yrs exp Hybrid

Senior Director, Identity and Access Management

Genworth Financial

Remote (Richmond, VA) +4 4 days ago $250,000–$300,000
Zero Trust Privileged Access Management (PAM) Privileged Identity Management (PIM) Just-In-Time (JIT) Access Authentication Authorization Secrets Management Directory Services Cloud Transformation Identity Lifecycle Management SOX Controls Disaster Recovery AI Identity Automation
10+ yrs exp Remote