Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

You will work with

As a Lead Identity Architect, you form part of the Enterprise Platforms team, building identity products. You will work with customers to understand their requirements, provide recommendations and deliver solutions. You smartly prioritise delivery to meet the needs of multiple customers.

Let me tell you about the role

Our team’s purpose is to re-conceptualise identity issues, discovering practical solutions that enable teams to build secure identity, authentication, authorisation, resource management, and governance systems to access digital content at scale.

As an identity architect, you form part of the identity platforms team, building identity products. You will work with customers to understand their requirements, provide recommendations and deliver solutions. You smartly prioritize delivery to meet the needs of multiple customers.

Your accountabilities

• Architecture: You rigorously develop solution architectures, seeking practical solutions that optimise and re-use capabilities. You will care passionately about the integrity of the digital products you create. You will be responsible for designing and building solutions that best meet the business needs and align with the digital strategy and roadmaps. Ability to relate complex topics in simple and accessible language at all levels of the organisation.
• Technology: As a technologist, you will have an eye for emerging identity technologies and standards and have a passion for learning. You will contribute to digital transformation initiatives from an architectural perspective, facilitating the delivery of solutions. You will bring good hands-on skills in key technologies and rapidly assess new technologies with a commercial mindset.
• Safety and Compliance: The safety of our people and customers is our highest priority. You will advocate and help ensure our architectures, designs, and processes enhance operational safety culture and improve our digital security. You create an environment where people listen and speak openly about the good, the bad, and the ugly so that everyone can understand and learn.
• Team: You will play an integral role in building the team's skillset while demonstrating your leadership values through delegation, motivation and trust. You will not just lead, but "do".
• · Relationships: You will build strong relationships across the business and digital teams. You will understand the long-term needs of the business and ensure the solutions you are developing enable delivery by building a rapport with team members inside and outside BP..

What you will need to be successful (experience and qualifications)

Education

A Bachelor's (or higher) degree, ideally in technology/Computer Science or equivalent work experience

Essential skills

• 6+ years of experience working in Identity and Access Management, across multiple Identity capabilities, e.g. AD/AAD, IGA, PAM
• Confirmed background in architecture with real-world experience of architecting, building, and supporting transformational enterprise-wide identity projects. You love envisaging the art of the possible and making that a reality.
• Deep-seated functional knowledge of IAM identity standards and IAM technology sets, such as - Identity life cycle governance tooling (Saviynt, SailPoint) and related provisioning processes (Certifications, JML, SOD), Access control models (RBAC, ABAC, PBAC), IAM protocols (SAML, OIDC, Kerberos, SCIM etc)
• Experience of delivering IAM capability to provide regulatory compliance assurance e.g SoX, PCI, GDPR etc
• Understanding of self-sovereign identity, DID and verifiable credentials
• Understanding of cloud computing and modern identity architectures
• Understanding of Agile IT Service Management (ITSM) and DevOps

Desirable skills

• Experience working with policy-based access control products, e.g., Open Policy Agent, Cedar, Amazon Verified Permissions, OpenFGA, etc.
• Experience in leveraging ML and AI in an IAM environment
• Experience of working with IBM TDI
• Certified Information Systems Security Professional (CISSP)
• AWS / Azure certifications or other similar credentials
• Architecture-related certifications, e.g. SABSA / TOGAF

About bp

bp is a global energy business with a purpose to reimagine energy for people and our planet. We aim to be a very different kind of energy company by 2030, helping the world reach net zero and improving people’s lives. We are committed to creating a diverse and inclusive environment where everyone can thrive. Join bp and become part of the team building our future!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is eligible for relocation within country

Remote Type:

This position is a hybrid of office/remote working

Skills:

Agility core practices, Agility core practices, Analytics, API and platform design, Business Analysis, Cloud Platforms, Coaching, Communication, Configuration management and release, Continuous deployment and release, Data Structures and Algorithms (Inactive), Digital Project Management, Documentation and knowledge sharing, Facilitation, Information Security, iOS and Android development, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Relational Data Modelling, Risk Management, Scripting, Service operations and resiliency, Software Design and Development, Source control and code management {+ 4 more}

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.