IAM Architect - Infrastructure & Access Management

Architect: Infrastructure & Access Management The Opportunity Our client is a leading international law firm, recognised for representing the world's major corporations, funds, and financial institutions in their most complex transactions and disputes. We are looking for a talented and experienced Architect: Infrastructure & Access Management to join the firms IT department in London. This is a high-impact role at the heart of our global security and identity strategy, offering the chance to shape architecture at enterprise scale while collaborating with top-tier colleagues across regions. What You'll Do You will lead the design and evolution of our Identity and Access Management (IAM) architecture across a complex, global environment. Key responsibilities include: • Developing and maintaining IAM architecture covering identity lifecycle, access governance, and privileged access controls • Designing secure authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and Conditional Access policies aligned with Microsoft best practices • Embedding zero trust and least privilege principles across all privileged roles and enterprise applications • Owning global firewall design and architecture • Architecting and enhancing Privileged Access Management (PAM) capabilities, including approval workflows and continuous monitoring • Championing Identity Threat Detection and Response (ITDR) solutions to proactively mitigate identity-based attacks • Guiding the hardening of multi-site Active Directory domains/forests and cloud identity components (Entra/Azure AD) • Collaborating with Security to design Azure Policies and guardrails supporting audit readiness (ISO 27001, ISO 22301) • Integrating IAM with HR, IT, and engineering systems throughout the user lifecycle • Staying ahead of emerging technologies including passwordless authentication, decentralised identity frameworks, and adaptive access controls What We're Looking For Qualifications & Experience • Proven background in IAM/identity engineering or architecture within large enterprise environments • Prior global or large-scale enterprise experience preferred • Microsoft Certified: Identity and Access Administrator Associate • CISSP or equivalent • Azure Cybersecurity Expert or Certified Identity and Access Manager (CIAM) Technical Skills • Deep expertise in Microsoft identity and security across SaaS/PaaS, IAM, and Privileged Access domains • Advanced knowledge of Entra ID/Azure AD and on-premises Active Directory • Strong command of SSO and authentication protocols: OpenID Connect, SAML, OAuth, Kerberos, LDAP • Hands-on experience with RBAC design, entitlement management, and automated provisioning pipelines • Proficiency with PowerShell and RESTful integrations for identity automation • Familiarity with NDR, Micro-Segmentation, and network topology as they relate to IAM • Experience with Azure Policy, landing zone guardrails, and Conditional Access at scale