IAM Engineer - SSO

WPP
United Kingdom
Workplace: HybridFull timeFunction: Data Science & Machine LearningSkills: ["Organizational skills","Cross-team collaboration","Risk translation","Pragmatism"]

Define and run governance for who can access DTS systems, data, APIs, tools, workflows, and AI-enabled capabilities. Own identity and access governance standards, coordinate recurring access reviews and recertification, and ensure least-privilege across privileged roles, external users, service accounts, and machine identities. Extend controls to AI agent and agentic workflows, data access governance, auditable evidence, and reporting for SOC 2 and ISO 27001 requirements while partnering across security, architecture, product, engineering, legal, privacy, and risk.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
WPP
WPP
1 month ago

IAM Engineer - SSO

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Define and run governance for who can access DTS systems, data, APIs, tools, workflows, and AI-enabled capabilities. Own identity and access governance standards, coordinate recurring access reviews and recertification, and ensure least-privilege across privileged roles, external users, service accounts, and machine identities. Extend controls to AI agent and agentic workflows, data access governance, auditable evidence, and reporting for SOC 2 and ISO 27001 requirements while partnering across security, architecture, product, engineering, legal, privacy, and risk.
Location: United Kingdom
Workplace: Hybrid
Employment Type: Full time
Job Function: Data Science & Machine Learning

Key Responsibilities

  • •Define and maintain the access governance framework for DTS, including standards for requesting, approving, provisioning, reviewing, revoking, and evidencing access for humans, non-humans, and AI agents.
  • •Own and coordinate recurring access reviews and recertification across DTS systems, privileged roles, sensitive datasets, client-facing platforms, and administrative tools.
  • •Govern privileged access across production systems, cloud environments, security tools, databases, CI/CD tooling, and administrative consoles while supporting least-privilege and just-in-time access models.
  • •Govern access for external users, clients, agencies, partners, and vendors, including onboarding, approval, permissions, expiry, offboarding, and tenant/workspace isolation considerations.
  • •Govern AI agent identities, permissioning, monitoring, review, revocation, and data access controls; maintain auditability, evidence, and reporting for access governance.
  • •produce access governance evidence for SOC 2, ISO 27001, client assurance, internal audit, and risk reviews

Key Requirements

  • •Experience in identity governance, access management/IAM, security governance, GRC, data access control, or platform security.
  • •Strong knowledge of least privilege, role-based access control, attribute-based access control, access reviews, privileged access, and segregation of duties.
  • •Experience governing access across SaaS platforms, cloud environments, APIs, data platforms, or enterprise technology estates.
  • •Knowledge of identity platforms such as Okta, Auth0, Keycloak, Azure AD/Entra ID, or similar.
  • •Understanding of service accounts and machine identities, plus API keys, tokens, secrets, and non-human access governance.
Experience:Identity governanceIAMData governanceGRCPlatform securitySaaSCloudAPIsAI agents
Skills:Organizational skillsCross-team collaborationRisk translationPragmatism
Languages:English
Tech Stack:OktaAuth0KeycloakAzure ADEntra IDSOC 2ISO 27001CI/CDAPIsTokensAPI keysSecrets

Company Brief

WPP
Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.
Industry: Advertising Media Groups
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1971
WebsiteLinkedIn