About this role
Job Description
We are seeking a Vice President, Identity Security Engineer to help shape and deliver a major identity modernisation programme, migrating from SailPoint IdentityIQ to SailPoint Identity Security Cloud. This is a hands-on technical leadership role for an engineer who enjoys solving complex security, data, integration and operating-model challenges at enterprise scale. You will work with engineering, security, operations and business partners to design a modern identity platform that is secure, resilient, scalable and easier for people to use. The successful candidate will combine deep SailPoint and identity governance expertise with the judgement, ownership and communication skills needed to lead complex changes across a global organisation.
Key Responsibilities
Lead the technical design and delivery of the migration from SailPoint IdentityIQ to SailPoint Identity Security Cloud, treating the move as a platform transformation rather than a like-for-like upgrade.
Define the future-state identity architecture, including identity data models, application onboarding patterns, access request processes, provisioning, deprovisioning, certifications and policy controls.
Translate complex IdentityIQ workflows, rules, connectors and customisations into secure, maintainable, cloud-aligned designs using Identity Security Cloud capabilities and extensibility options.
Make practical engineering decisions that balance security, user experience, delivery risk, regulatory expectations and long-term maintainability.
Partner with application, infrastructure, cloud, HR, operations, risk and compliance teams to resolve dependencies and keep delivery moving across a complex enterprise environment.
Lead technical planning across discovery, design, build, testing, parallel run, cutover and operational readiness, with clear ownership of risks, dependencies and outcomes.
Set high engineering standards for documentation, testing, observability, change control, resilience and secure-by-design delivery.
Coach engineers, share technical knowledge and create an environment where teams can make good decisions quickly and safely.
Identify opportunities to simplify legacy processes, reduce manual effort, improve controls and unlock the benefits of a modern cloud identity platform.
Qualifications / Competencies
Strong hands-on experience designing, building or leading SailPoint IdentityIQ, SailPoint Identity Security Cloud, or comparable identity governance platforms.
Experience with IdentityIQ to Identity Security Cloud migration, cloud identity transformation, or modernisation of a mature identity governance environment.
Deep understanding of identity governance and administration, including joiner, mover and leaver processes, access requests, certifications, role models, policies and segregation of duties.
Ability to assess existing workflows, rules, connectors, data flows and customisations, then redesign them for a more scalable and maintainable cloud platform.
Strong engineering background across APIs, integrations, directories, HR sources, application onboarding, automation and secure system design.
Experience integrating identity platforms with Microsoft Entra ID, Active Directory, LDAP, HR systems, SaaS applications, on-premises applications and privileged access platforms.
Comfortable leading technical discussions with senior stakeholders and explaining complex engineering trade-offs in clear, practical language.
Proven ability to lead complex initiatives across distributed teams, manage ambiguity and drive delivery without losing sight of quality or risk.
Strong ownership mindset, with the ability to anticipate problems, remove blockers and make decisions that move the programme forward.
Clear communicator who can build trust with engineering teams, business partners and control functions.
Desirable Skills
SailPoint certification, Identity Security Cloud Engineer certification, CISSP, CISM or similar security qualification.
Experience using identity analytics, risk-based access insights or AI-assisted governance to improve access decisions and reduce manual review effort.
Experience with CyberArk or other privileged access management technologies.
Experience delivering security or identity change in regulated, high-scale or highly governed environments.
Understanding of Zero Trust, least privilege, non-human identities, cloud security and modern access governance patterns.
Experience simplifying legacy processes and helping teams adopt more modern engineering practices.
Our benefits
To help you stay energized, engaged and inspired, we offer a wide range of employee benefits including: retirement investment and tools designed to help you in building a sound financial future; access to education reimbursement; comprehensive resources to support your physical health and emotional well-being; family support programs; and Flexible Time Off (FTO) so you can relax, recharge and be there for the people you care about.
Our hybrid work model
BlackRock’s hybrid work model is designed to enable a culture of collaboration and apprenticeship that enriches the experience of our employees, while supporting flexibility for all. Employees are currently required to work at least 4 days in the office per week, with the flexibility to work from home 1 day a week. Some business groups may require more time in the office due to their roles and responsibilities. We remain focused on increasing the impactful moments that arise when we work together in person – aligned with our commitment to performance and innovation. As a new joiner, you can count on this hybrid model to accelerate your learning and onboarding experience here at BlackRock.
Guidance on AI use for candidates
At BlackRock, AI has long been part of how we work – enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting to know you through your own experiences, thinking, and judgment. To support you, we’ve provided guidance on when and how to use AI during our hiring process so you can approach each step with confidence and showcase your best self.
About BlackRock
At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress.
This mission would not be possible without our smartest investment – the one we make in our employees. It’s why we’re dedicated to creating an environment where our colleagues feel welcomed, valued and supported with networks, benefits and development opportunities to help them thrive.
To learn more about BlackRock, please visit Careers.BlackRock.com. We also encourage you to get to know us on LinkedIn, Instagram, YouTube, X, and TikTok.
BlackRock is proud to be an Equal Opportunity Employer. We evaluate qualified applicants without regard to age, disability, race, religion, sex, sexual orientation and other protected characteristics at law.
Skills Required
- Hands-on experience designing, building or leading SailPoint IdentityIQ or SailPoint Identity Security Cloud implementations
- Experience migrating from IdentityIQ to Identity Security Cloud or leading cloud identity modernisation programs
- Deep understanding of identity governance and administration (joiner/mover/leaver, access requests, certifications, role models, policies, segregation of duties)
- Ability to assess and redesign workflows, rules, connectors, data flows and customisations for a scalable cloud platform
- Strong engineering background across APIs, integrations, directories, HR sources, application onboarding, automation and secure system design
- Experience integrating identity platforms with Microsoft Entra ID, Active Directory, LDAP, HR systems, SaaS and on‑prem applications and privileged access platforms
- Proven ability to lead complex initiatives across distributed teams and manage delivery, risks and dependencies
- Comfortable leading technical discussions with senior stakeholders and explaining engineering trade-offs
- Strong ownership mindset and clear communication skills to build trust with engineering and control functions
- SailPoint certification, Identity Security Cloud Engineer certification, CISSP, CISM or similar security qualification
- Experience with identity analytics, risk-based access insights or AI-assisted governance
- Experience with CyberArk or other privileged access management technologies
- Experience delivering security or identity change in regulated, high-scale or highly governed environments
- Understanding of Zero Trust, least privilege, non-human identities and cloud security best practices
BlackRock Compensation & Benefits Highlights
-
Retirement Support — The package includes a 401(k)/Retirement Savings Plan with an employer match plus an additional company retirement contribution. Together with an employee stock purchase option, this positions retirement support as a notable strength for U.S. roles.
-
Parental & Family Support — Paid parental leave and family‑building resources (adoption, fertility, nursing support) are emphasized, alongside child, special‑needs, and elder‑care resources. This breadth signals meaningful support across diverse family situations.
-
Leave & Time Off Breadth — Flexible Time Off (FTO) for eligible roles is promoted, with additional sick and bereavement leave. Time away is framed as enabling rest and recharge when needed.
BlackRock Insights
What We Do
As the world’s largest asset manager, BlackRock partners with investors around the globe to help them (and those on whose behalf they invest) plan for life’s most important goals – like retirement, home ownership and their children’s education. Our clients range from governments, foundations and other large institutions to those investing on behalf of individuals, including firefighters, nurses, teachers and factory workers. BlackRock was founded with the idea of creating a better asset management firm — one that was purpose-driven, focused on clients and risk management, and propelled by data and technology. Our breakthrough Aladdin® platform is BlackRock’s technological backbone, helping investors see and manage their whole portfolios in one place – from constructing investments to monitoring risk and executing trades. Used by hundreds of external institutions around the world, Aladdin combines powerful analytics and a common language to help investment teams make faster, more informed decisions across public and private markets. It’s a key part of our business and one of the reasons we’re trusted to manage more assets than any other investment manager today. At BlackRock, we challenge conventions and raise the bar for what’s possible. We harness technology to unlock new solutions, simplify complexity, and deliver investment strategies that meet people where they are. Whether it’s retirement planning, wealth building or navigating market shifts, we’re here to help clients invest more easily, more affordably and with more choice as we chart a path toward financial well-being together. Learn more: Careers.BlackRock.com
Why Work With Us
Without our people, technology is irrelevant. When we combine the power of people with the power of technology, we amplify our ability to create better outcomes for our employees, clients, shareholders and society alike.
Gallery
BlackRock Teams
BlackRock Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
BlackRock has 25,000 employees across more than 100 offices in over 40 countries around the world.
