A leading international law firm is looking for an IAM Architect to join its London IT function. This is a senior, global role. You will own the firm's identity and access architecture and shape how a complex, multi-region enterprise secures its people, systems and data.
The role
You will design and develop the firm's IAM architecture across identity lifecycle, access governance and privileged access. Working with the Information Security and Platform Engineering teams, you will embed zero trust and least privilege principles throughout the organisation. You will also be responsible for global firewall design and architecture.
Key responsibilities include:
Designing authentication and authorisation patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and Conditional Access policies aligned with Microsoft best practice
Architecting privileged access management capability, including approval workflows and continuous monitoring
Leading identity governance automation, MFA integration and identity threat detection and response (ITDR)
Guiding the hardening of multi-site Active Directory and Entra ID environments
Integrating IAM with HR, IT and engineering systems for policy-driven access across the user lifecycle
Supporting audit readiness (ISO 27001, ISO 22301) and designing Azure Policies and guardrails with Security
Maintaining reference architectures, standards and runbooks, and presenting architecture decisions to senior business and IT leaders
What you'll bring
Extensive hands-on experience in IAM, identity engineering or architecture within large enterprise environments, including leading complex IAM design initiatives
Deep expertise in Microsoft identity and security: Entra ID, on-prem AD, Conditional Access at scale and privileged access
Strong command of SSO and authentication protocols, RBAC design, entitlement management and automated provisioning
PowerShell and RESTful integration skills for identity automation
An understanding of network topologies, NDR and micro-segmentation, and how they interact with IAM
Microsoft Certified: Identity and Access Administrator Associate (required). CISSP, Azure Cybersecurity Expert or CIAM are a strong advantage
A degree in Computer Science or a related field, or...
IAM Architect employer: Picture More Careers
As a SAP Systems Analyst at our dynamic People Systems team, you'll be part of an innovative HR technology journey in a collaborative environment that values growth and development. With a strong focus on career advancement, hybrid working options, and the chance to shape the future of HR technology, this role offers a unique opportunity to enhance your skills while contributing to a leading international professional services firm.
