Senior Identity Security Engineer — AI‑Driven IAM (Remote)

Scopely; Greater London; Remote; GBP 110,000 - 150,000; Full time

Job summary

Scopely is seeking a Senior Identity Security Engineer to join its Information Security team. This hands-on role focuses on building scalable, AI-native identity workflows across employee, player, partner, and non-human identities, with guardrails and human approvals where needed.

You will leverage AWS, GCP, Okta, IAM Center, and Zero Trust concepts to reduce privilege, govern identities, and drive secure access across critical business operations in a predominantly remote setup or hybrid work

Qualifications

• 5+ years of experience in IAM, or identity-focused cloud/security engineering, including hands-on ownership of production identity controls in complex environments.
• Strong experience with Okta or a comparable workforce identity platform and AWS/GCP IAM, as well as federation and provisioning protocols such as SAML, OIDC, OAuth, and SCIM.
• Production experience building, testing, and operating identity services or automation using Terraform or comparable infrastructure as code, Python, Go, or TypeScript., APIs, version control, and CI/CD.
• Strong knowledge of least privilege, just-in-time privileged access, identity lifecycle and governance, authentication controls, and non-human or workload identity risk.
• Experience threat-modeling identity architectures, integrations, and access paths, and driving remediation with service owners.
• Hands‑on experience building AI-native workflows: systems where agents carry out multi-step work end to end, designed from the start around what agents can be trusted to do and where humans approve. Using a coding assistant does not count.
• Working fluency with harness engineering and multi-agent development: defining tools and permissions, scoping context and data, writing evals, orchestrating specialized agents, and instrumenting agent runs so failures are diagnosable, plus the judgment to keep those systems inside least‑privilege boundaries.
• Ability to lead technical work from design through deployment and operations, and explain identity risks and implementation choices to stakeholders.
• Experience with identity governance, privileged access, or cloud entitlement tooling, or having built the equivalent in-house.

Responsibilities

• Reduce identity attack surface and privilege by implementing least-privilege, just-in-time elevations, and automated access reviews.
• Build repeatable identity and access workflows for onboarding, approvals, role changes, reviews, and offboarding.
• Govern non-human identities: inventory, ownership, rotate/revoke secrets, and manage credentials across services.
• Protect access with phishing-resistant authentication, device trust, privileged access controls, and quick revocation of suspicious sessions.
• Threat-model identity platforms, integrations, and paths to identify privilege escalation and credential misuse.
• Build identity telemetry and response workflows to detect risky sign-ins and compromised integrations.
• Design break-glass and recovery procedures for identity services and cloud access.
• Extend patterns to player and partner identities, including federation and external/vendor access.
• Produce audit-ready evidence for access reviews and lifecycle events as part of workflows.

Skills

Identity & IAM

Okta

AWS

GCP

SAML

OIDC

OAuth

SCIM

Terraform

Python

Go

TypeScript

CI/CD

Least privilege

Identity governance

Threat modelling

AI-native workflows

Multi-agent development

Tools

Okta

Terraform

AWS

GCP

Kubernetes

Job description

Scopely is seeking a Senior Identity Security Engineer to join its Information Security team. This hands-on role focuses on building scalable, AI-native identity workflows across employee, player, partner, and non-human identities, with guardrails and human approvals where needed.

You will leverage AWS, GCP, Okta, IAM Center, and Zero Trust concepts to reduce privilege, govern identities, and drive secure access across critical business operations in a predominantly remote setup or hybrid work