Enterprise Architect

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm’s work is distinguished by a unique combination of precision and vision. Based in any U.S. office, the Enterprise Architect is a senior technical leader responsible for defining and governing the firm’s target-state technology architecture across on-premises, cloud, data, and AI-enabled environments. This individual will modernize a mature Microsoft estate, mature the firm’s Azure and AWS footprints, establish architectural standards spanning networking, security, and data governance, and provide technical leadership for the responsible adoption of artificial intelligence. The role partners closely with infrastructure, security, applications, data, records, knowledge management, and practice-technology teams to ensure that solutions are secure by design, cost-aware, operationally supportable, and aligned to the confidentiality, ethical, regulatory, and professional-responsibility expectations of a global law firm. This role reports to the Chief Information Officer. Responsibilities include: Architecture & Governance: Coordinate enterprise architecture reference models, principles, and technology standards, and steward them through the Enterprise Architecture Review Board (ARB) governance and gate process. Microsoft Modernization: Modernize the legacy Microsoft estate: Active Directory, Group Policy, DNS/DHCP, Windows Server, file services, and on-premises Exchange – and drive migration and integration paths toward Microsoft 365, Microsoft Entra ID, and cloud-native services. Cloud Architecture: Design and govern Azure and AWS landing zones, subscription/account structures, identity federation, private connectivity, and cost and tagging standards for a multi-cloud environment. Networking & Firewall: Define reference designs for hybrid networking, segmentation, and firewall architecture – including site-to-site and cloud connectivity, VPN, micro-segmentation, and next-generation firewall policy standards. Data Governance: Establish and maintain data governance and information-protection architecture, including data classification, sensitivity labeling, DLP, encryption/key management, and controls that support ethical walls, client-matter confidentiality, and Office of the General Counsel obligations. Security by Design: Embed security-by-design across the estate in partnership with the security team – Zero Trust principles, Conditional Access, identity governance, logging/monitoring, and vulnerability-driven remediation planning. Documentation & Roadmaps: Produce and maintain architecture artifacts – reference architecture, decision records, standards documents, and roadmaps – and present recommendations to IT leadership and firm stakeholders. AI Strategy & Enablement:…