Senior Identity Security Engineer - Cloud & IAM

wppmedia; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Medical insurance

Paid time off

Job summary

WPP Media in London seeks a Senior Security Engineer to join the Cloud Architecture team and advance identity security across multi-tenant platforms, focusing on secure-by-default patterns and scalable access controls.

The role leads design and implementation of IAM, SSO, MFA, and SCIM integrations, collaborating with Platform Engineering, Security Ops, and Data Engineering to monitor, respond, and reduce risk. Hybrid work with strong security culture.

Qualifications

• Extensive experience in identity/access security engineering across enterprise environments.
• Proven ability to design and implement secure-by-default patterns for IAM/SSO/MFA.
• Strong scripting and automation skills (PowerShell, Python) for platform automation.

Responsibilities

• Design and implement identity and access controls across Entra ID, Okta, M365, Google Workspace, and AWS IAM Identity Center to raise control coverage and reduce account compromise risk.
• Define and enforce conditional access, MFA, and passwordless strategies to achieve target adoption rates.
• Google Workspace: OAuth app controls, context-aware access, DLP, secure default sharing.
• Entra ID: conditional access baselines, tenant restrictions, enterprise app consent policies, token protections.
• AWS IAM Identity Center: permission set design, assignment governance, session duration, access portal controls, SCIM provisioning hygiene.
• Build automation using SCIM, platform APIs, and ServiceNow workflows to meet JML SLAs.

Skills

Identity security

SSO/MFA

PowerShell

Python

Azure AD/Entra

Okta

SCIM

ServiceNow

SIEM/SOAR

Governance & ISO27001

Tools

Entra ID (Azure AD)

Okta

Google Workspace

AWS IAM Identity Center

ServiceNow

Microsoft Sentinel

SCIM APIs

Job description

WPP Media in London seeks a Senior Security Engineer to join the Cloud Architecture team and advance identity security across multi-tenant platforms, focusing on secure-by-default patterns and scalable access controls.

The role leads design and implementation of IAM, SSO, MFA, and SCIM integrations, collaborating with Platform Engineering, Security Ops, and Data Engineering to monitor, respond, and reduce risk. Hybrid work with strong security culture.