Senior Identity Security Engineer - Cloud & IAM

wppmedia; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Pension plan

Vision and dental insurance

Generous paid time off

Employee discounts

Mental health awareness days

Job summary

WPP Media seeks a Senior Security Engineer in London to lead identity and access controls across Entra ID, Okta, M365, Google Workspace, and AWS IAM Identity Center. You will design secure-by-default patterns, implement JML automation, and integrate security telemetry into SIEM/SOAR workflows.

collaboration with Platform Engineering and Security Operations is essential for risk reduction. The role emphasizes reduction of account compromise risk, policy enforcement, and scalable identity

Qualifications

• Enterprise identity/access security engineering experience.
• Hands-on with Entra ID, Okta, Google Workspace, and AWS IAM Identity Center.
• Proficiency in SCIM, ServiceNow workflows, and CI/CD checks.
• Experience with MFA, passwordless, and conditional access programs.
• Strong collaboration with security ops, engineering, and risk teams.

Responsibilities

• Design and implement identity controls across Entra ID, Okta, M365, Google Workspace, and AWS IAM Identity Center.
• Define conditional access, MFA, and passwordless strategies; drive adoption targets.
• Integrate identity logs into SIEM/SOAR (Microsoft Sentinel) and develop playbooks.
• Lead or support incident response and post-incident improvements.
• Partner with EUC/security/engineering to embed secure-by-default patterns.

Skills

Identity security engineering

SCIM automation

PowerShell

Python

Okta

Entra ID / Azure AD

Google Workspace

AWS IAM Identity Center

ServiceNow

Microsoft Sentinel

Tools

Entra ID (Azure AD)

Okta

Google Workspace

AWS IAM Identity Center

ServiceNow

Microsoft 365

PowerShell

Python

SCIM

Microsoft Sentinel

Job description

WPP Media seeks a Senior Security Engineer in London to lead identity and access controls across Entra ID, Okta, M365, Google Workspace, and AWS IAM Identity Center. You will design secure-by-default patterns, implement JML automation, and integrate security telemetry into SIEM/SOAR workflows.

collaboration with Platform Engineering and Security Operations is essential for risk reduction. The role emphasizes reduction of account compromise risk, policy enforcement, and scalable identity