Principal Information Security Engineer – Identity Security Engineering

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Lead strategic initiatives focused on identity security throughout the organization.

• Implement global Identity Provider and privileged access management controls.

• Offer expertise, guidance, and responsibility for internal identity and CIAM issues across on-premises, cloud-hosted, and third-party SaaS platforms.

• Act as the engineering principal for the execution of secure identity practices within technology architectures, including the enterprise IdP service.

• Develop and manage identity security policies, standards, and guidelines for users, on-premises services, cloud service providers, and SaaS applications.

• Collaborate with teams responsible for Active Directory and authentication services to ensure adherence to security policies and standards.

• Spearhead the implementation of JLL’s zero trust strategy for users and third parties in conjunction with the network security organization.

• Design privileged access management controls aimed at reducing misuse and facilitating the detection and response to cyber threats.

• Own, operate, and improve the JLL enterprise Privileged Access Management tool.

• Serve as the subject matter expert in secure identity service design and controls engineering.

• Work alongside application development teams to integrate CIAM best practices into JLL’s online offerings.

⛳️ Requirements

• Over 10 years of technical cybersecurity experience, including at least 7 years focused on identity security.

• Demonstrated experience in enhancing and advancing identity security programs within enterprise technology landscapes.

• Experience in enabling and enforcing identity security across the M365 suite, internally developed applications, cloud services, and on-premises hardware.

• Proven track record in implementing and managing privileged access management solutions; CyberArk is preferred.

• Experience in implementing and managing IdP solutions; Okta is preferred.

• Collaborative experience with cyber threat management and insider threat teams to support detection, monitoring, and incident response activities.

• Experience in implementing Active Directory governance frameworks.

• Strong understanding of security frameworks and standards, including ISO, NIST, and ATT&CK.

• Ability to adapt and prioritize tasks in a dynamic work environment.

• Outstanding written and oral communication skills.

• Capacity to work independently as well as collaboratively, fostering relationships and effectively engaging with business partners.

• Enthusiasm for working in a diverse, collaborative, and motivated professional setting.

• Must possess authorization to work in the United States without sponsorship.

• No visa sponsorship will be provided.

🏝️ Benefits

• 401(k) plan with matching contributions from the company.

• Comprehensive medical, dental, and vision care coverage.

• Paid parental leave at 100% of salary.

• Paid Time Off and company holidays.

• Early access to earned wages through Daily Pay.

• A supportive culture and comprehensive benefits package that prioritizes mental, physical, and emotional well-being.

• Reasonable accommodations available for individuals with disabilities.