Group Capability Manager – WIAM

At Bnode (formerly bpostgroup), cybersecurity is a strategic priority. As we strengthen our Group-wide security capabilities, we are looking for an experienced Group WIAM Capability Manager to lead the engineering, delivery and operation of our Workforce Identity & Access Management platforms.

In this role, you will take ownership of the technical development and operational performance of our WIAM services, ensuring secure, efficient and consistent identity and access management for employees, contractors and other workforce users across our international organisation.

Working closely with the Group IAM Capability Lead, you will translate our identity strategy into scalable, secure and reliable technology solutions.

Your responsibilities

Lead WIAM platform engineering and development

• Design, build and continuously improve enterprise-scale WIAM platforms and services.

• Translate the Group IAM strategy into technical roadmaps, engineering initiatives and delivery plans.

• Drive secure, scalable and resilient platform architectures, leveraging cloud technologies, APIs and automation.

• Manage platform upgrades, integrations, technical debt and continuous modernisation.

Own WIAM platform delivery and operations

• Manage WIAM platforms as internal products, balancing business requirements, security, performance and operational stability.

• Own and prioritise the platform engineering backlog.

• Ensure platform availability, reliability, monitoring, incident management and service performance.

• Drive standardisation, automation and continuous service improvement.

Drive workforce identity and access capabilities

• Develop and optimise identity lifecycle management, authentication, authorisation, Single Sign-On (SSO) and Multi-Factor Authentication (MFA).

• Implement and improve automated Joiner, Mover and Leaver (JML) processes.

• Enable secure and efficient access provisioning and deprovisioning across enterprise applications and technology environments.

• Support modern identity standards and protocols, including SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC).

• Drive integration with HR systems, Active Directory, Microsoft Entra ID, cloud platforms and enterprise applications.

• Reduce manual identity management processes through automation and standardised integration patterns.

Lead teams and technology partners

• Coordinate multidisciplinary engineering teams, external technology partners and managed service providers.

• Oversee technical delivery, platform integration and operational performance.

• Manage technology vendors, engineering budgets and platform costs.

• Collaborate with Security Architecture, Enterprise Architecture, HR, Workplace, Cloud and Infrastructure teams.

We are looking for a technically strong WIAM professional who combines deep enterprise identity expertise with platform engineering and leadership experience.

Essential experience and technical skills:

• Approximately 10+ years of experience in IT, cybersecurity, identity management or platform engineering.

• Strong technical expertise in Workforce Identity & Access Management (WIAM) and enterprise identity architectures.

• Proven experience designing, implementing and operating enterprise-scale IAM platforms, ideally involving technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity or SailPoint.

• Excellent understanding of SSO, MFA, identity federation, authentication, authorisation and identity lifecycle management.

• Hands-on experience with Joiner, Mover and Leaver processes, automated access provisioning and HR system integration.

• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect and identity integration technologies.

• Experience with API integration, cloud platforms, automation and secure software engineering.

• Proven ability to lead technical teams and manage complex identity platform engineering initiatives.

• Experience with Agile, DevSecOps, platform lifecycle management and IT service operations.

• Strong stakeholder management skills and experience working with technology vendors and implementation partners.

• A degree in Computer Science, IT, Cybersecurity or equivalent professional experience.

• Fluent English. Dutch and/or French is an advantage.

Like a long-awaited parcel, we want to make you feel welcome and valued. Our offer includes a competitive monthly salary, that goes without saying. On top of that, you can count on:

• Meal vouchers of €10 per working day 
• Hospitalization-, group- and disability insurances 
• A phone subscription, including 25GB data 
• A flexible renumeration plan, which allows you to customize your own benefits. A company car, bike leasing, public transportation, extra days off,... the choice is yours 
• Possibility to enter the Federal Mobility plan 
• Work/life balance, thanks to flexible working hours and the possibility to work from home  
• 20 days of statutory leave and 7 additional extralegal days off  
• An end-of-year and performance-based bonus and double holiday pay  
• Many benefits from more than 100 Bpost-partners