Full job descriptionArchitect: Infrastructure & Access Management
The Opportunity
Our client is a leading international law firm, recognised for representing the world’s major corporations, funds, and financial institutions in their most complex transactions and disputes. We are looking for a talented and experienced Architect: Infrastructure & Access Management to join the firms IT department in London.
This is a high-impact role at the heart of our global security and identity strategy, offering the chance to shape architecture at enterprise scale while collaborating with top-tier colleagues across regions.
What You’ll Do
You will lead the design and evolution of our Identity and Access Management (IAM) architecture across a complex, global environment. Key responsibilities include:
*Developing and maintaining IAM architecture covering identity lifecycle, access governance, and privileged access controls
*Designing secure authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and Conditional Access policies aligned with Microsoft best practices
*Embedding zero trust and least privilege principles across all privileged roles and enterprise applications
*Owning global firewall design and architecture
*Architecting and enhancing Privileged Access Management (PAM) capabilities, including approval workflows and continuous monitoring
*Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks
*Guiding the hardening of multi-site Active Directory domains/forests and cloud identity components (Entra/Azure AD)
*Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO 27001, ISO 22301)
*Integrating IAM with HR, IT, and engineering systems throughout the user lifecycle
*Staying ahead of emerging technologies including passwordless authentication, decentralised identity frameworks, and adaptive access controls
What We’re Looking For
Qualifications & Experience
*Proven background in IAM/identity engineering or architecture within large enterprise environments
*Prior global or large-scale enterprise experience preferred
*Microsoft Certified: Identity and Access Administrator Associate
*CISSP or equivalent
*Azure Cybersecurity Expert or Certified Identity and Access Manager (CIAM)
Technical Skills
*Deep expertise in Microsoft identity and security across SaaS/PaaS, IAM, and Privileged Access domains
*Advanced knowledge of Entra ID/Azure AD and on-premises Active Directory
*Strong command of SSO and authentication protocols: OpenID Connect, SAML, OAuth, Kerberos, LDAP
*Hands-on experience with RBAC design, entitlement management, and automated provisioning pipelines
*Proficiency with PowerShell and RESTful integrations for identity automation
*Familiarity with NDR, Micro-Segmentation, and network topology as they relate to IAM
*Experience with Azure Policy, landing zone guardrails, and Conditional Access at scale