Mayer Brown

Mayer Brown is an international law firm positioned to represent the world’s major corporations, funds, and financial institutions in their most important and complex transactions and disputes. We are recognized by our clients as strategic partners with deep commercial instincts and a commitment to creatively anticipating their needs and delivering excellence in everything we do.

We are a collegial and collaborative firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support, and development they need to grow, thrive, and realise their greatest potential all while supporting the Firm’s client service principles of excellence, strategic partnership, commercial instinct, integrated strengths, innovation, and collaboration across our international firm.

If you enjoy working with team members whose defining characteristics are exceptional client service, initiative, professionalism, responsiveness, and adaptability, you may be the person we are seeking to join our IT department in our London office as an Architect: Infrastructure & Access Management.

Hours

9:30 a.m. – 5:30 p.m. with flexibility as needed.

Given the global nature of this role, there may be a need for off-hours (e.g., late evening and/or early morning) conference calls or video conferences

Responsibilities

• Stay current with emerging IAM technologies such as passwordless authentication, decentralized identity frameworks, and adaptive access controls.
• Collaborate with the Senior Architect Information Security and lead the implementation of identity governance automation, leveraging machine learning for anomaly detection and remediation.
• Ensure seamless integration of multi-factor authentication (MFA) with biometric and mobile device capabilities to improve both security and user experience.
• Champion the adoption of identity threat detection and response (ITDR) solutions to proactively identify and mitigate identity-based attacks.
• Develop and maintain the firm’s IAM architecture, including identity lifecycle, access governance, and privileged access controls.
• Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and in conjunction with the Platform Engineering team, Conditional Access policies aligned with Microsoft best practices.
• Embed zero trust and least privilege principles across all privileged roles and enterprise applications.
• Responsible for global firewall design and architecture.
• Architect and enhance privileged access management (PAM) capabilities, including approval workflows and continuous monitoring.
• Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation (e.g., ISO 27001, ISO 22301).
• Integrate IAM with HR, IT, and engineering systems to ensure policy-driven access throughout the user lifecycle.
• Oversee Conditional Access deployment, risk-based authentication, and device/state signals.
• Guide the operation and hardening of multi-site Active Directory domains/forests and cloud identity components (Entra/Azure AD).
• Align IAM with Firewall, Micro-Segmentation, NDR, Remote Access, and Certificate Management strategies.
• Assess IAM-related vulnerabilities and design timely mitigations.
• Establish and maintain reference architectures, design standards, runbooks, and documentation.
• Participate in vendor governance, roadmap reviews, and security notifications.
• Communicate architecture decisions to senior business and IT leaders; foster cross-regional collaboration.
• Track industry trends and recommend innovations to improve security and reduce complexity.
• Perform other duties as assigned or required to meet Firm goals and objectives.