Identity Practice Lead
Bridewell
Identity Practice Lead
Bridewell
CNI-focused cyber security consulting
Bridewell · London, United Kingdom (Hybrid) · Full-time · Posted 2026-09-23
Workplace: hybrid
Department: Cyber Security
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world’s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
Who are we looking for?
We are seeking an experienced and technically credible Identity Practice Lead to build and grow our Identity practice, with a particular focus on serving clients operating within Critical National Infrastructure (CNI).
This is a strategic, hands-on leadership role where you will be responsible for designing, refining, and building a portfolio of identity services — spanning advisory, architecture, and delivery — that meets the heightened resilience, assurance, and regulatory expectations of CNI operators. Alongside service development, you will play a central role in upskilling and training our wider consulting community to deliver identity-based engagements confidently and consistently, and you will help shape the roadmap towards a Managed Identity Service offering.
You will combine deep technical expertise in Identity and Access Management (IAM) with commercial acumen and a genuine passion for developing others.
What you’ll be doing
Practice Leadership & Strategy
Own the strategic vision, roadmap, and commercial growth plan for the Identity practice, aligned to broader business objectives.
Design, refine, and continuously evolve a structured portfolio of identity services — including identity strategy and maturity assessments, IAM architecture and design, Privileged Access Management (PAM), Identity Governance and Administration (IGA), and Zero Trust identity architectures — tailored to the needs of CNI and regulated sectors.
Ensure services are built to withstand the scrutiny of CNI-specific regulatory and assurance frameworks (e.g. NIS Regulations, CAF, sector-specific regulators), embedding resilience, segregation of duties, and OT/IT identity convergence considerations into service design.
Act as the senior technical authority and escalation point for identity engagements, ensuring quality, consistency, and technical rigour across all client delivery.
Build strategic partnerships with key identity vendors (e.g. Microsoft Entra, Okta, SailPoint, CyberArk, Ping Identity) to strengthen proposition, access early roadmap insight, and unlock partner-funded growth opportunities.
Managed Identity Service Development
Define the business case, service design, and operating model for a new Managed Identity Service, working with delivery, operations, and commercial teams to bring it to market.
Establish the tooling, processes, and SLAs required to operate identity services (e.g. joiner-mover-leaver, access reviews, privileged session monitoring, certification campaigns) on an ongoing basis for clients.
Identify the resourcing, technology, and partnership requirements needed to stand up and scale the managed offering.
Capability Building & Training
Design and deliver a structured upskilling and training programme to grow identity capability across the wider consulting population, from foundational awareness through to specialist delivery skills.
Create reusable delivery assets — methodologies, playbooks, reference architectures, and accelerators — that enable consultants outside the core Identity team to deliver identity engagements consistently and to a high standard.
Mentor and develop consultants working on identity engagements, supporting technical growth and career progression.
Champion relevant certifications and vendor accreditations across the practice to build a bench of credentialed identity talent.
Client & Business Development
Act as a trusted advisor to CNI clients on identity strategy, risk, and roadmap, building long-term relationships at senior stakeholder level.
Support pre-sales activity, including scoping, proposal writing, and bid support, translating client challenges into compelling identity solutions.
Represent the practice externally through thought leadership — client workshops, conference speaking, whitepapers, and contributions to industry/regulatory discussions on identity in CNI.
Work closely with adjacent practices (OT security, cloud security, managed security services, GRC) to identify cross-sell opportunities and ensure identity is embedded coherently across the wider security proposition.
Delivery Oversight
Provide oversight and quality assurance across live identity engagements, ensuring technical designs are fit for purpose and risk-appropriate for CNI environments.
Support resource planning and allocation across the identity portfolio, balancing delivery quality with practice growth.
Own and evolve delivery methodologies and documentation standards for identity engagements.
You will need to have experience in:
Experience
Significant experience in Identity and Access Management, with a demonstrable track record designing and delivering IAM/IGA/PAM solutions in a consulting or advisory environment.
Prior experience working with, or serving, Critical National Infrastructure, regulated, or high-assurance environments (e.g. energy, utilities, transport, finance, defence, government).
Experience building or scaling a service line, practice, or capability within a professional services or consultancy environment.
A track record of designing and delivering training or capability-uplift programmes for technical teams.
Experience contributing to or shaping managed service offerings is highly desirable.
Technical Skills
Strong working knowledge of core identity platforms and concepts, such as: Microsoft Entra ID, Okta, Ping Identity, SailPoint, CyberArk, ForgeRock, or equivalent.
Solid understanding of IAM, IGA, PAM, Zero Trust architecture, and identity federation/SSO standards (SAML, OAuth2, OIDC, SCIM).
Awareness of OT/IT identity convergence challenges and the unique constraints of securing identity in industrial and CNI environments.
Familiarity with relevant regulatory and assurance frameworks applicable to CNI (e.g. NIS Regulations, NCSC CAF, sector-specific standards).
Relevant vendor or industry certifications desirable (e.g. Microsoft Identity and Access Administrator, SailPoint, CyberArk, CISSP, CISM).
Behavioural & Leadership Skills
Strategic thinker with the commercial awareness to balance practice growth, delivery quality, and client value.
Confident communicator, comfortable engaging senior client stakeholders and translating technical complexity into business terms.
Natural coach and mentor, energised by developing others and building organisational capability.
Comfortable operating with a degree of ambiguity, building structure and process where it doesn't yet exist.
Collaborative, working effectively across practice and functional boundaries.
Why Join Us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn’t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
25 Days Holiday - Plus buy and sell options and increasing for long service
Flexible Working (around core office hours)
Employee Shareholder Scheme and Performance Reward Model
Private Healthcare (Bupa)
Company Pension
Personal Day & Birthday Off - After 1 year of service
Family Leave - After 1 year of service
Enhanced Maternity based on length of service
Access to a Training Budget
Life Assurance
Electric Vehicle Scheme
Cycle to Work Scheme
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion.
Note: To be eligible for this job you must either hold SC or be eligible and willing to go through security clearance.
Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.
Powered by Workable
Bridewell provides cyber security services to organisations in Critical National Infrastructure and other highly regulated sectors. It offers cyber consulting and managed security services, with a focus on implementing practical security controls and monitoring to protect operations. As a long-standing Microsoft partner, Bridewell specializes in maximizing the effectiveness of Microsoft Security technology—such as Defender and Cloud security tools—to deliver targeted, policy-driven security solutions. The company differentiates itself through deep knowledge of CNI challenges, accredited industry credentials, and a collaborative approach that keeps clients in partnership to choose, deploy, and operate the right security measures. The goal is to help clients defend against threats and continue operating safely and securely by continually improving their security posture.
Explore more opportunities at Bridewell