What you’ll be doing
1. Own the technical direction, delivery and operation of Privilege Access Workstations, Privilege Access Management and Identity Access Management platforms to deliver secure access to business critical TSA environments.
2. Translate TSA and BT security requirements into implemented, auditable technical controls, embedding security by design.
3. Lead threat modelling, security assessments and resilience testing to inform platform design and investment decisions.
4. Ensure platforms are secure, resilient, highly available and operable, meeting agreed service levels.
5. Provide authoritative security engineering leadership to architecture, service and operations teams.
6. Own compliance, documentation and assurance evidence to support TSA audits and reviews.
7. Lead incident response and recovery for PAW, PAM and IAM services, including on call escalation where required.
8. Line manage and develop security engineers, setting standards, building capability and driving accountability.
9. Drive continuous improvement across security engineering practices, automation and tooling.
Skills Required for the Role
10. Strong experience leading the design and operation of PAW, PAM and/or IAM platforms in complex, live environments.
11. Deep understanding of identity, authentication, authorisation and privileged access technologies.
12. Proven ability to embed security controls by design and manage security risk pragmatically.
13. Hands on background across Windows, Linux, identity services, networking and secure access technologies.
14. Experience operating in 24/7 production environments, managing incidents and restoring service safely.
15. Ability to clearly communicate technical risk, decisions and trade offs to senior stakeholders.
16. Demonstrated people leadership, including coaching engineers and growing technical capability.
17. Strong documentation skills, producing design artefacts and compliance evidence suitable for audit.
Experience Required for the Role
18. Team leadership experience.
19. Knowledge of any of the below is advantageous: Windows/Linux server ecosystem. PKI. Identity Access Management. Firewalls/ VPN / ZTNA. Proxy servers. Privileged Access. PowerShell scripting and Ansible.
20. Technical delivery and operations.
21. Security control integration, hardening & hygiene.
22. Working in regulated environment
23. 24/7 technical operations.
Benefits
24. On target 15% on target bonus
25. Health Care
26. Car Allowance
27. BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
28. From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.
29. Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.
30. 25 days annual leave (not including bank holidays), increasing with service
31. 24/7 private virtual GP appointments for UK colleagues
32. 2 weeks carer’s leave
33. World-class training and development opportunities
34. Option to join BT Shares Saving schemes.