Staff enterprise technology engineer

Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

You will work with

You will lead a multidisciplinary team of Identity and Access Management engineers, working alongside product managers, engineering leaders, architects, cyber security leaders, control owners, audit and compliance teams, vendors, and business collaborators.

Together, you will provide secure, reliable, compliant, and understandable enterprise identity services for workforce, application, machine, privileged, and partner identities.

Let me tell you about the role

As a Staff Identity and Access Management Manager, you will be accountable for the organisational capability, workforce, operating model, performance, risk, cost, and sustained outcomes of an enterprise Identity and Access Management team.

Your team’s responsibilities will span consumer adoption, service operation, identity-lifecycle execution, user-facing workflows, access governance, control operation, audit and compliance evidence, service continuity, and continual improvement.

You will establish the environment, expectations, capabilities, and management system that enable engineers to deliver consistently across the full Identity and Access Management lifecycle.

The organisation works across Identity and Access Management capabilities such as identity governance and administration, authentication, directory services, privileged access management, identity protection, federation, digital trust, Public Key Infrastructure, and supporting identity infrastructure.

You will balance security, control effectiveness, service reliability, user experience, workforce sustainability, and business priorities while maintaining clear accountability across Product Management, Engineering, Architecture, Cyber Security, Risk, Compliance, and service teams.

What you will deliver

• Establish and communicate a clear mission, direction, operating model, and set of outcomes for the Identity and Access Management team.
• Build and sustain a diverse, capable, engaged, and accountable organisation with the skills required to support the complete identity lifecycle.
• Own workforce strategy, organisational design, capacity planning, succession, recruitment, retention, development, and deployment of employees and third-party resources.
• Translate Core Security Platforms priorities into an achievable portfolio of team objectives, commitments, measures, and improvement outcomes.
• Ensure the team provides secure and effective consumer adoption, service operation, identity-lifecycle execution, access governance, operational controls, audit evidence, and service continuity.
• Establish clear ownership, decision rights, issue paths, service expectations, and working relationships across adjacent teams and fields.
• Ensure operational integrity and compliance with approved architecture, security policies, engineering standards, data requirements, operational procedures, and regulatory controls.
• Maintain oversight of significant identity incidents, service risks, control failures, evidence deficiencies, audit findings, and remediation commitments.
• Ensure critical incidents and control failures receive effective leadership, collaborator communication, accountableissuen, and sustained remediation.
• Establish performance measures covering delivery, adoption, service quality, lifecycle completion, restoration, controls, evidence, user experience, workforce health, cost, and continual improvement.
• Use service data, operational experience, audit results, control performance, and collaborator feedback to improve priorities and influence platform roadmaps.
• Ensure new or changed identity services enter operation with appropriate ownership, documentation, monitoring, controls, evidence, support arrangements, and lifecycle accountability.
• Drive automation, self-service, standardisation, reusable practices, knowledge management, and recurrence prevention.
• Lead the team’s financial plans, budget, resource allocation, sourcing decisions, vendor relationships, and third-party performance.
• Create an inclusive and psychologically safe environment in which people can raise risks, challenge decisions, learn from failure, and improve how work is performed.
• Set clear performance expectations and ensure leaders and engineers receive important objectives, feedback, coaching, development, and recognition.
• Develop leadership and technical capability throughout the organisation and maintain credible succession for critical roles.
• Represent the Identity and Access Management organisation in senior governance, investment, risk, assurance, audit, operational, and workforce forums.

What you will need to be successful

Experience and qualifications

A bachelor’s degree or equivalent experience in computer science, engineering, cyber securityfield, or a related discipline, or equivalent practical experience.

Significant professional experience in Identity and Access Management, cyber security, enterprise technology, platform services, or a related field.

Demonstrated experience leading multidisciplinary technology teams in a large, sophisticated, or regulated enterprise environment.

Experience handling workforce capacity, organisational capability, performance, budgets, vendors, third-party resources, operational risk, and delivery commitments.

Broad solid understanding across multiple Identity and Access Management areas, such as:

Identity governance and administration

Enterprise authentication and federation

Directory and identity lifecycle services

Privileged access management

Passwordless and certificate-based authentication

Business-to-business and partner identity

Identity protection and risk-based access

Public Key Infrastructure and digital trust

Machine and application identity

Supporting Domain Name System and identity infrastructure

Experience leading organisations accountable for secure technology adoption, service operation, identity lifecycle, operational controls, evidence, compliance, or audit support.

Experience working with senior technology, cyber security, risk, compliance, audit, vendor, and business collaborators.

Technical skills we need from you

Broad understanding of enterprise identity architecture, identity lifecycle, access governance, authentication, privileged access, federation, certificate services, and Zero Trust principles.

Ability to understand how identity platforms, applications, infrastructure, data, controls, user workflows, and business processes interact at enterprise scale.

Strong understanding of operational integrity, service management, control execution, audit evidence, risk management, service transition, and continual improvement.

Ability to evaluate technical and operational risks, ask effective questions, and ensure decisions are made by the appropriate accountable authority.

Ability to use service, control, financial, workforce, delivery, and user-experience measures to advise priorities and assess organisational performance.

Understanding of automation, application programming interfaces, workflow orchestration, data analysis, monitoring, and self-service as methods for improving identity services.

Ability to communicate sophisticated technology, risk, control, and investment matters clearly to senior technical and nontechnical audiences.

Essential skills

• Organisational leadership: Build the structures, capabilities, relationships, and environment required for sustained performance.
• People leadership: Set clear expectations and develop people through coaching, feedback, opportunity, accountability, and recognition.
• Strategic judgement: Balance security, service, control, workforce, financial, technical, and business considerations.
• Outcome accountability: Remain accountable for organisational results while preserving clear ownership across fields.
• Operating-model field: Establish enforceable decision rights, lifecycle boundaries, measures, governance, and working practices.
• Risk leadership: Create transparency around incidents, control failures, service risks, evidence deficiencies, and remediation.
• Financial stewardship: Allocate resources and handle costs, vendors, and third parties in alignment with priorities and value.
• Influence: Align senior collaborators across organisational boundaries and resolve challenging priorities constructively.
• Inclusive leadership: Create an environment where diverse perspectives improve decisions and people can perform at their best.
• Continuous improvement: Convert operational learning, audit results, workforce feedback, and service data into durable organisational improvements.

Skills that set you apart

• Experience leading global Identity and Access Management teams in a regulated or compliance-intensive organisation.
• Experience transforming identity services, operating models, workforce structures, sourcing arrangements, or service performance.
• Experience leading through major incidents, material control failures, significant audits, complex remediation, or enterprise identity change.
• Experience improving identity user experience, operational controls, audit evidence, automation, or self-service at scale.
• Experience handling substantial budgets, strategic vendors, and blended employee and third-party workforces.
• Professional certifications in identity, cyber security, information systems auditing, risk, service management, or leadership.
• Ability to translate sophisticated operational and technical conditions into clear executive decisions and organisational action.

About bp

 

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

 

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

 

Additional Information

 

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

IAM Tools, Microsoft PKI

.

Legal Disclaimer:

We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.