Identity Security Architect

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. Based in Los Angeles or New York, the Identity Security Architect plays a critical role in the InfoSec team, leading the design, implementation, and assessment of identity security controls across the firm’s hybrid infrastructure. This position ensures compliance with Information Security and IS policies while aligning with industry best practices for identity security and zero trust. This role collaborates closely with the IT Architect, Cloud Administrators, and senior leadership on identity and zero trust operations. The Identity Security Architect will interface with technical teams, legal and compliance stakeholders, external auditors, and cloud service providers. Define and own the firm’s enterprise identity security architecture and multi-year roadmap for workforce, privileged, service, and machine identities across hybrid and multi-cloud environments. Establish identity security principles, reference architectures, standards, and reusable design patterns aligned with Zero Trust, least privilege, defense in depth, and regulatory requirements. Architect identity solutions across Microsoft Entra ID, Active Directory, cloud platforms, SaaS applications, on-premises systems, and third-party services, ensuring consistent control enforcement and interoperability. Develop the firm’s privileged access strategy, including administrative tiering, just-in-time and just-enough access, session controls, break-glass access, credential vaulting, and protection of high-value identities. Define conditional access, authentication assurance, device trust, session management, and risk-based access policies that balance security, usability, resilience, and business requirements. Provide architecture leadership for non-human identities, including service accounts, workload identities, managed identities, application credentials, API access, certificates, keys, and secrets throughout their lifecycle. Lead identity threat modeling and architecture risk assessments for new technologies, applications, cloud services, mergers, and strategic initiatives; document risks and drive practical remediation plans. Partner with Security Operations to define identity telemetry, detections, response playbooks, and recovery requirements for credential theft, privilege escalation, account compromise, and other identity-based attacks. Embed identity security requirements into application development, DevSecOps, infrastructure-as-code, cloud onboarding, and technology procurement processes. Chair or lead identity architecture and design reviews, evaluate exceptions, and ensure solutions conform to approved standards before implementation. Assess identity security platforms and service providers, lead technical evaluations and proof-of-concept activities, and provide recommendations based on security, scalability, integration, operational support, and total cost. communicate risks, priorities, dependencies, and roadmap progress to technical and senior leadership. Maintain identity-related policies, standards, architecture decisions, data flows, control mappings, and operational handoff documentation to support auditability and sustainable operations. Serve as the senior technical authority for identity security, mentor architects and engineers, and coordinate cross-functional delivery among Information Security, Infrastructure, Cloud, Applications, Legal, Compliance, and business stakeholders. Remain current on identity attack techniques, security technologies, industry standards, and regulatory developments, translating relevant changes into the firm’s architecture and control roadmap. Deep expertise with Microsoft Entra ID and Active Directory, including hybrid identity, Conditional Access, identity protection, authentication methods, administrative tiering, and privileged identity management. Demonstrated ability to develop identity security strategies, reference architectures, standards, design patterns, and multi-year roadmaps for complex hybrid and multi-cloud environments. Strong command of Zero Trust principles and their practical application across identity, devices, applications, data, networks, infrastructure, and security operations. Experience designing risk-based access controls using least privilege, continuous verification, explicit trust decisions, device posture, authentication assurance, session controls, and identity risk signals. Knowledge of identity lifecycle governance, including joiner-mover-leaver processes, automated provisioning and deprovisioning, role and entitlement design, access certifications, segregation of duties, and access policy enforcement. Experience securing privileged and non-human identities, including service accounts, workload identities, application credentials, managed identities, certificates, keys, APIs, and secrets. Deep knowledge of cloud platforms, including Azure, AWS, and GCP, and their native identity, entitlement, workload identity, and security services. Ability to perform identity threat modelling and architecture risk assessments and to translate identity attack techniques, control gaps, and regulatory obligations into actionable security requirements. Knowledge of relevant security frameworks and regulatory requirements, including NIST, ISO 27001, SOC, GLBA, HIPAA, GDPR, and applicable legal-industry obligations. Strong written and verbal communication skills, with the ability to explain complex identity risks and architecture decisions to technical teams, business stakeholders, auditors, and senior leadership. Bachelor’s degree in Computer Science, Information Systems, or related field. Minimum 10 years of experience in information technology with 5+ years focused on identity and zero trust security. Relevant identity security and Zero Trust certifications, such as Microsoft Certified: Gibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law. retirement benefits; basic life insurance; Flexible Spending Accounts; as well as discretionary, performance-based bonuses. ______ For technical difficulties with our online application, please contact us at View email address on click.appcast.io recruiting support team will respond as soon as possible. ______ Gibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations. If you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at View email address on click.appcast.io about the status of an application or other non-accommodation matter will not receive a response.