Entity:

Technology

Job Family Group:

IT&S Group

Job Description:

About bp

Technology is making a difference in bp’s plans to invest in today’s energy systems and help build tomorrow’s. We have a deep history of technical problem-solving and use advanced technologies across the business, from our remotely managed platform in the Caspian to advanced seismic imaging and biogas production. Technology provides a competitive edge in our oil and gas business and creates products that underpin our differentiated brands such as Castrol, bp Ultimate and Aral. Our digital teams enable the underlying infrastructure from which our staff and sites operate and connect every day; protecting and safeguarding our systems, assets and people from digital threats; and leverage digital technology to deliver the products, platforms and services our business needs. Technology is driving value and returns for bp as an integrated energy company.

Let me tell you about the role

Identity & Access Management (IAM) is a critical capability in bp that supports the delivery of the robust management of authentication and access to digital assets in the organisation. Enterprise Technology Engineers in IAM focus on the design, development, testing, operating and ongoing improvements to digital products and processes and have a focus on operational integrity and assuring compliance with architectural and security standards and group policy.

What you will deliver

We require a capable experienced individual to join as a member of a diverse DevOps team of engineers accountable for the delivery of identity governance processes and procedures and the automation of identity lifecycle management across bp. As part of the role you will be responsible for delivery of both operational & development activities for identity and access processes (joiners, movers and leavers). The role requires working closely with IAM IGA platform, integration product teams and architecture as well as interfacing with the bp helpdesk services and key business areas such as HR, Trading, Shipping and bp affiliates.

As a senior engineer of the Identity product and team, you will be responsible for

• Supporting making the Identity as a customer backed, product lead capability

• Taking responsibility for incidents ensuring the successful completion of transaction automation and managing any processing issues and taking responsibility for investigation, diagnosis and incident resolution

• Deliver work using agile methods including owning delivery and outcomes of all work packages and work items assigned to you

• Supporting the design, development and deployment of new processes and automations and working to continual improve the performance of existing processes and automations

• Ensuring operational integrity and operational compliance with architectural and security standards, as well as compliance and policy controls

• Preparing process and design documents and gathering requirements effectively

• Facilitating and coordinating meetings with multiple teams and people

• Support the continual development of skills across the team through learning new skills and sharing knowledge with others

Desirable Education

• Bachelor's (or higher) degree, ideally in Computer Science, MIS/IT, Mathematics or a hard science

What you will need to be successful (experience and qualifications)

Years of experience: 8 to 10 years, with a minimum of 5 years of relevant experience operating within identity and access management (IAM) domain.

Required Criteria / Skills

• Experience in working with market leading Identity Governance & Administration (IGA) solutions for example Saviynt, Ping, Sailpoint etc.

• Expertise in integrating IAM systems with diverse applications, platforms, and technologies

• Proficiency in optimizing and scaling IAM systems for enterprise-wide deployments

• Experience with advanced authentication and authorization mechanisms, including risk-based authentication and attribute-based access controls

• Skills in business process analysis and requirements gathering for complex IAM projects and preparing the Design Document and System Requirement document.

• Experience having helped architect, design and implement complex IAM solutions

• Understanding of disaster recovery and business continuity for IAM environments

• Good understanding in privacy regulations and their application to IAM systems

• Ability to work effectively with large volumes of data in order to analyse and derive actionable insight from identity data

• Use data to provide factual measurement and drive actions

• An effective level of skills in working with data through either SQL, Python, Excel, PowerBI or other technologies

• Knowledge and experience in IAM audit processes, controls, and compliance frameworks

• Understanding of IAM frameworks, protocols, and standards, along with practical experience in implementing IAM solutions.

• Hands on experience with authentication and authorization mechanisms, including risk-based authentication and attribute-based access control

• Knowledge of emerging trends and technologies in authentication and authorization.

• Basic scripting or programming languages for automation and customization within IAM systems

• Knowledge of or experience with cloud infrastructure and the designing and implementation of secure and highly available IAM infrastructure architectures.

• Knowledge of network security concepts and secure infrastructure configurations specific to IAM systems.

• Understanding of security measures, controls, and best practices within IAM systems

• Understanding of regulatory compliance requirements and ability to ensure IAM systems' compliance

• Knowledge of or experience with cloud technologies (AWS/Azure) and the designing and implementation of secure and highly available IAM infrastructure architectures

• Knowledge of network security concepts and secure infrastructure configurations specific to IAM systems.

• Understanding of disaster recovery and business continuity for IAM environments.

Preferred Criteria / Skills

• Experience in delivering at least one of RBAC/PBAC/ABAC concepts across multiple applications.

• Technical knowledge of at least one SaaS IAM product in the market along with its different capabilities.

• Appreciation of IAM processes including application access governance, attestation, compliance and audit controls to including SOX and SAP access governance

• Certifications like Certified Identity and Access Manager (CIAM), Certified Identity Management Professional (CIMP), CISSP, or CISM and/or Saviynt L100/L200 certifications

Why join bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner! At bp, we support our people to learn and grow in a diverse and challenging environment. We believe that our team is strengthened by diversity. We are committed to fostering an inclusive environment in which everyone is respected and treated fairly.

Disclaimer

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered.

Travel Requirement

Up to 10% travel should be expected with this role

Relocation Assistance:

This role is not eligible for relocation

Remote Type:

This position is a hybrid of office/remote working

Skills:

Agility core practices, Agility core practices, Analytics, API and platform design, Business Analysis, Cloud Platforms, Coaching, Communication, Configuration management and release, Continuous deployment and release, Data Structures and Algorithms (Inactive), Digital Project Management, Documentation and knowledge sharing, Facilitation, Information Security, iOS and Android development, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Relational Data Modelling, Risk Management, Scripting, Service operations and resiliency, Software Design and Development, Source control and code management {+ 4 more}

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.