Global Platform Team Lead

Who We Are
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities.
BCG was the pioneer in business strategy when it was founded in ****.
Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities.
Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change.
BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose.
We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.
What You'll Do
The Senior Director – Identity Security Lead is responsible for leading the strategy, engineering, and operational excellence of BCG's global identity security practice across both Human and Agentic identity domains.
This role owns the end-to-end identity lifecycle, from modernising enterprise directory services and privileged access management to pioneering the design of next-generation agentic AI identity management frameworks that will define how BCG secures autonomous agents and non-human workloads.
The leader will oversee four core teams — Directory Services, Privileged User Management, Identity Governance & Administration (IGA), and Secure Data — ensuring a coherent, automated, and resilient identity security capability that underpins BCG Core, BCG X, and Consulting Team (CT) worldwide.
The role requires a rare combination of deep technical identity expertise, a forward-thinking perspective on AI-era security, and the ability to collaborate with ISRM, platform engineering, and business leadership to shape BCG's identity posture for the next decade.
Key Responsibilities
Strategic Leadership & Transformation
Define and execute a unified Identity Security strategy that spans human identity modernisation and the emerging domain of agentic AI identity — establishing BCG as a leader in how AI agents are authenticated, authorised, and governed.
Lead the ongoing modernisation of BCG's enterprise identity infrastructure, transitioning legacy directory and access systems to a scalable, cloud-native, zero-trust identity fabric.
Develop and publish BCG's Agentic Identity framework — including standards, patterns, and controls for non-human identities, service accounts, AI agents, and automated workloads at scale.
Align identity security strategies with broader digital transformation, BCG X product delivery, and AI/ML platform initiatives.
Establish a global identity observability and telemetry capability, enabling real-time visibility into identity risks, access anomalies, and compliance posture.
Directory Services
Oversee the strategy and execution of BCG's enterprise directory modernisation programme, including Active Directory (AD) rationalisation and transition to cloud-based identity providers.
Drive AD modernisation towards a strategic, cloud-based identity foundation, reducing legacy dependencies while maintaining operational stability.
Ensure directory services meet high availability, performance, and security standards across global BCG offices and hybrid environments.
Embed automation into directory lifecycle management, provisioning, and group policy governance.
Privileged User Management
Lead the design, delivery, and operational management of Privileged Access Management (PAM) solutions, ensuring comprehensive control over standing and just-in-time privileged access.
Extend PAM principles to cover agentic and service identities, ensuring non-human privileged access is governed with equivalent rigour to human privileged users.
Drive continuous reduction of standing privilege across BCG's environment through automation, credential vaulting, and session monitoring.
Implement privileged access telemetry and behavioural analytics to detect and respond to anomalous privileged activity.
Identity Governance & Administration (IGA)
Oversee the IGA programme, ensuring consistent enforcement of access lifecycle management, access certifications, segregation of duties (SoD), and role-based access control (RBAC) across all enterprise systems.
Drive IGA automation to reduce manual access provisioning, improve access review efficiency, and enforce least-privilege principles at scale.
Design and implement governance frameworks that extend to AI agent identities, covering creation, scoping, review, and decommissioning of agentic permissions.
Partner with HR, Legal, and ISRM to ensure identity governance processes remain compliant with evolving regulatory and audit requirement