Enterprise Architect

Enterprise Architect

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm's work is distinguished by a unique combination of precision and vision.

Based in any U.S. office, the Enterprise Architect is a senior technical leader responsible for defining and governing the firm's target-state technology architecture across on-premises, cloud, data, and AI-enabled environments. This individual will modernize a mature Microsoft estate, mature the firm's Azure and AWS footprints, establish architectural standards spanning networking, security, and data governance, and provide technical leadership for the responsible adoption of artificial intelligence.

The role partners closely with infrastructure, security, applications, data, records, knowledge management, and practice-technology teams to ensure that solutions are secure by design, cost-aware, operationally supportable, and aligned to the confidentiality, ethical, regulatory, and professional-responsibility expectations of a global law firm.

This role reports to the Chief Information Officer.

Responsibilities include:

• Architecture & Governance: Coordinate enterprise architecture reference models, principles, and technology standards, and steward them through the Enterprise Architecture Review Board (ARB) governance and gate process.
• Microsoft Modernization: Modernize the legacy Microsoft estate:
  Active Directory, Group Policy, DNS/DHCP, Windows Server, file services, and on-premises Exchange – and drive migration and integration paths toward Microsoft 365, Microsoft Entra , and cloud-native services.
• Cloud Architecture: Design and govern Azure and AWS landing zones, subscription/account structures, identity federation, private connectivity, and cost and tagging standards for a multi-cloud environment.
• Networking & Firewall: Define reference designs for hybrid networking, segmentation, and firewall architecture – including site-to-site and cloud connectivity, VPN, micro-segmentation, and next-generation firewall policy standards.
• Data Governance: Establish and maintain data governance and information-protection architecture, including data classification, sensitivity labeling, DLP, encryption/key management, and controls that support ethical walls, client-matter confidentiality, and Office of the General Counsel obligations.
• Security by Design: Embed security-by-design across the estate in partnership with the security team – Zero Trust principles, Conditional Access, identity governance, logging/monitoring, and vulnerability-driven remediation planning.
• Documentation & Roadmaps: Produce and maintain architecture artifacts – reference architecture, decision records, standards documents, and roadmaps – and present recommendations to IT leadership and firm stakeholders.
• AI Strategy & Enablement: Advise on and help govern the responsible adoption of AI tooling and platforms, including Microsoft Copilot, Azure OpenAI, vendor-integrated AI capabilities, and workflow automation opportunities that improve productivity while protecting firm and client data.
• AI Governance & Risk Controls: Define architecture patterns, guardrails, and review criteria for AI solutions, including data residency, model and vendor risk, prompt and output handling, training-data exposure, access controls, auditability, retention, and human oversight appropriate for a legal environment.
• Collaboration: Partner with infrastructure, applications, security, and practice-technology teams to ensure architectural alignment and to guide project-level solution design.

Qualifications:

• Excellent written and verbal communication skills, with the ability to translate complex technical concepts for technical teams and firm leadership alike.
• Strong analytical and problem-solving skills, with sound judgment in balancing security, cost, and operational supportability.
• Ability to influence without direct authority and build consensus across infrastructure, security, applications, and practice-technology teams.
• Confi…