IAM Architect

A leading international law firm is looking for an IAM Architect to join its London IT function. This is a senior, global role. You will own the firm's identity and access architecture and shape how a complex, multi-region enterprise secures its people, systems and data.

The role

You will design and develop the firm's IAM architecture across identity lifecycle, access governance and privileged access. Working with the Information Security and Platform Engineering teams, you will embed zero trust and least privilege principles throughout the organisation. You will also be responsible for global firewall design and architecture.

Key responsibilities include:

• Designing authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and Conditional Access policies aligned with Microsoft best practice
• Architecting privileged access management capability, including approval workflows and continuous monitoring
• Leading identity governance automation, MFA integration and identity threat detection and response (ITDR)
• Guiding the hardening of multi-site Active Directory and Entra ID environments
• Integrating IAM with HR, IT and engineering systems for policy-driven access across the user lifecycle
• Supporting audit readiness (ISO 27001, ISO 22301) and designing Azure Policies and guardrails with Security
• Maintaining reference architectures, standards and runbooks, and presenting architecture decisions to senior business and IT leaders

What you'll bring

• Extensive hands-on experience in IAM, identity engineering or architecture within large enterprise environments, including leading complex IAM design initiatives
• Deep expertise in Microsoft identity and security: Entra ID, on-prem AD, Conditional Access at scale and privileged access
• Strong command of SSO and authentication protocols, RBAC design, entitlement management and automated provisioning
• PowerShell and RESTful integration skills for identity automation
• An understanding of network topologies, NDR and micro-segmentation, and how they interact with IAM
• Microsoft Certified: Identity and Access Administrator Associate (required). CISSP, Azure Cybersecurity Expert or CIAM are a strong advantage
• A degree in Computer Science or a related field, or equivalent experience
• The ability to explain complex identity concepts clearly to technical and non-technical audiences

Global enterprise experience is preferred.