Senior Security Architect

About the role

JLL is looking for a Senior Security Architect in Belen, Costa Rica. The role builds a holistic view and roadmap of JLL's security strategy across computing, data, network, voice, video, IoT infrastructure and assets, covering on-premise data centre assets and cloud-based application hosting (Azure as primary, AWS as secondary) and SaaS solutions. It is the global point of contact for Americas, Asia Pacific and EMEA regions and business lines, working with the Technical Architecture Board and senior management.

Key responsibilities

• Provide strategic direction for the Enterprise Security Strategy and educate colleagues on emerging threats across JLL's technologies.
• Lead security across endpoint protection, network security, firewalls, applications and cloud security.
• Make decisions with incomplete information and socialise them to global stakeholders.
• Guide, govern and oversee multiple security initiatives in parallel.
• Bridge solution architects and business/IT leadership, and anticipate business and regulatory challenges.
• Maintain architectural documents such as domain roadmaps, standards, patterns and reference architectures.
• Work with Applications, Infrastructure and Cloud architects to recommend cost-effective security controls, and analyse the benefits and risks of IT investments.
• Ensure the Enterprise Application team complies with JLL standards, including security policies, change management and SOC2.
• Design new products with senior technical staff, set the security stack roadmap and standards, and evaluate third-party applications, tools and libraries.

Required profile

• 8+ years of technology experience, including 5+ years as an enterprise security architect.
• Deep understanding of security threats and the ability to explain complex ideas to different audiences.
• Ability to influence peers and senior leadership and to lead teams through change management.
• Excellent written and verbal communication and problem-solving skills.

Required skills

• Knowledge of security threat vectors, industry-standard controls and technologies.
• Network and network security, including firewalls, VPNs and B2B controls.
• Application security tools and systems.
• Preferred: claims authentication (Okta, PingFederate, ADFS), load balancers, certificates and keys, Microsoft Azure PaaS/IaaS, multi-cloud environments.