Principal Information Security Engineer, Identity Security Engineering

JLL (Jones Lang LaSalle)

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Charlotte, NC
Salary
$285,000–$295,000 / yr
Employment
Full-time
Posted
4 days ago
Freshness
Confirmed live today
Closes
Dec 25, 2026

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $180k
This role $290k
$112k most similar roles pay here $315k

This role pays more than 98% of similar roles. Most pay $151,231–$208,800 — the shaded band above. At the midpoint, this role pays about $290k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About JLL (Jones Lang LaSalle)

JLL (Jones Lang LaSalle) is a global professional services firm specializing in real estate and investment management, providing services to buyers, sellers, tenants, landlords, investors, and developers. Industry: Commercial Real Estate Services

JLL (Jones Lang LaSalle) currently has 76 open roles on FindRole.

Listed pay typically runs $139,260–$170,000 across 38 roles with salary data.

Most-posted roles

View all roles at JLL (Jones Lang LaSalle)

At a glance

TL;DR · Principal Information Security Engineer, Identity Security Engineering

Principal Information Security Engineer, Identity Security Engineering joins the team to lead strategic identity security initiatives and deliver global Identity Provider and privileged access management controls. This role involves managing internal identity and CIAM matters across on-premises, cloud-hosted, and third-party SaaS platforms. The engineer will implement secure identity practices in technology architectures, modify security policies for various use cases, and partner with network security teams to deliver a zero trust strategy. Key responsibilities include designing privileged access controls, operating the CyberArk tool, and collaborating with development teams to ensure CIAM best practices. Required expertise includes M365, Active Directory governance, and familiarity with frameworks like ISO, NIST, and ATT&CK. The role addresses complex security challenges by enforcing account policies and ensuring robust detection and response capabilities against both internal and external cyber threats across diverse environments.

What you'll do

  • Lead strategic identity security initiatives and deliver global Identity Provider (IdP) and privileged access management controls.
  • Serve as the engineering principal for implementing secure identity practices in enterprise technology architectures.
  • Manage and control identity security policies for on-premises services, cloud providers, and SaaS platforms.
  • Partner with network security teams to lead the delivery of a zero trust strategy for users and third parties.
  • Design and manage privileged access management controls to mitigate risks from insider and external cyber threats.
  • Own and advance the enterprise Privileged Access Management tool, preferably CyberArk.
  • Act as a subject matter expert for designing secure identity services and enforcing account security policies.
  • Collaborate with application development teams to implement best practices for customer identity and access management (CIAM).

What we're looking for

  • Must have 10+ years of technical cybersecurity experience.
  • Must have at least 7 years of identity security experience.
  • Proven experience maturing identity security programs across enterprise technology environments.
  • Experience enforcing identity security across M365, cloud services, and on-premises appliances.
  • Experience implementing and managing privileged access management solutions (CyberArk preferred).
  • Experience implementing and managing IdP solutions (Okta preferred).
  • Experience implementing Active Directory governance models to ensure compliance with security policies.
  • Strong knowledge of security frameworks and standards such as ISO, NIST, and ATT&CK.

More like this

Similar roles

Principal Engineer, Agentic Identity Security

Wells Fargo

Irving, TX +2 4 days ago $159,000–$254,000
Identity and Access Management Cybersecurity Zero Trust OAuth OpenID Connect SAML SPIFFE/SPIRE Microsoft Entra ID Azure CyberArk Saviynt GitHub Copilot API Security Secrets Management
7+ yrs exp

Associate Director, Cybersecurity Engineering

MSD

Rahway, NJ +1 2 days ago $142,400–$224,100
Privileged Access Management Identity and Access Management HashiCorp Vault CyberArk Delinea BeyondTrust Active Directory Microsoft Entra ID AWS Azure GCP Kubernetes PowerShell Jira Agile Zero Trust ITIL NIST SDLC ServiceNow
10+ yrs exp Hybrid

Senior Identity Security Engineer

CoStar Group

Arlington, VA +1 34 days ago $133,000–$203,000
Okta Microsoft Entra ID PingID Active Directory SAML OAuth OIDC Kerberos FIDO2 Python PowerShell Bash SIEM CI/CD MDM Intune Jamf JumpCloud PKI Zero Trust
4+ yrs exp

Director, Identity Platforms & Operations

The Coca‑Cola Company

Atlanta, GA 9 days ago $171,000–$198,000
Microsoft Entra ID CyberArk Active Directory Zero-Trust MFA Identity Governance SOX Compliance NIST 800-63 ISO 27001 Group Policy Identity Lifecycle Management Service Account Management
8+ yrs exp

Identity and Access Management Architect, Lead

Booz Allen Hamilton

Fort Meade, MD 34 days ago $99,000–$225,000
IAM Zero Trust Active Directory Entra ID LDAP SailPoint Okta Saviynt SIEM UEBA PKI SSO NIST SP 800-53 STIGs HSPD-12 Python REST JSON XML
7+ yrs exp

Principal Information Systems Security Engineer

Leidos

MD 90 days ago $154,050–$278,475
Risk Management Framework (RMF) CNSSI 1253 DoD 8500 Zero Trust Cloud Computing Cybersecurity Risk Assessment Information Assurance Incident Response System Engineering
10+ yrs exp