Latest AI JobsBrowse Jobs
W

IAM Engineer - SSO

WPPUnited KingdomTechnology & Innovation
Apply on company site
Salary
Not listed
Job type
Full-time
Posted
13 Jul 2026
Status
Open · checked 7d ago

About this role

Role Overview

The IAM Engineer - SSO role at WPP in the United Kingdom is a hands-on governance and control position reporting directly to the SVP Security and Compliance. This professional governs who and what can access critical systems, data, APIs, tools, workflows, and AI-enabled capabilities across the organization.

Key Responsibilities

Define and maintain the comprehensive access governance framework for DTS systems, aligning standards with architecture, security, privacy, and compliance requirements.
Own the regular access review and recertification processes to identify and remediate stale, excessive, orphaned, or poorly owned access.
Ensure proper control, justification, and auditability for privileged access across production systems, cloud environments, and databases.
Govern onboarding, permissions, expiry, and offboarding for external users, clients, agencies, partners, and vendors.
Manage non-human access by defining standards for service accounts, machine identities, API keys, tokens, and integration credentials.
Oversee the governance model for AI agents and agentic workflows, ensuring scoped permissions and auditable actions.
Manage access to sensitive, client, partner, and WPP-owned data, supporting role-based access control and privacy-by-design requirements.
Produce access governance evidence and documentation to support SOC 2, ISO 27001, client assurance, and internal audits.

Requirements

Professional background in identity governance, access management, IAM, security governance, GRC, data access control, or platform security.
Strong understanding of least privilege, role-based access control, attribute-based access control, access reviews, privileged access, and segregation of duties.
Practical experience governing access across SaaS platforms, cloud environments, APIs, data platforms, or enterprise technology estates.
Knowledge of identity platforms such as Okta, Auth0, Keycloak, or Azure AD / Entra ID.
Understanding of service accounts, machine identities, API keys, tokens, secrets, and non-human access governance.
Knowledge of data classification, dataset access governance, privacy-by-design, and audit requirements.
Excellent organizational skills with the ability to coordinate reviews, evidence, remediation, and reporting across multiple teams.

Nice to Have

Understanding of AI agents, agentic workflows, delegated authority, and tool-access governance.

Skills and Tools

Azure
Okta
Auth0
Keycloak
Azure AD / Entra ID
Identity and Access Management (IAM)
Governance, Risk, and Compliance (GRC)

About the Company

WPP is the trusted growth partner for the world’s leading brands, uniting cutting-edge media intelligence, data solutions, world-class creativity, and transformative enterprise solutions. Operating across more than 100 markets, the company relies on exceptional talent and platforms like WPP Open to help clients capture opportunity and deliver transformational growth.

How to Apply

Interested candidates should visit the official WPP careers page to submit an application for this position.

Skills and tech stack

Azure

Questions candidates ask

What department does this role belong to?

The position sits within the Technology & Innovation department.

Who does the IAM Engineer report to?

The role reports into the SVP Security and Compliance.

What identity platforms are relevant to this role?

Relevant identity platforms include Okta, Auth0, Keycloak, and Azure AD / Entra ID.

Does this role cover AI governance?

Yes, the role includes defining and overseeing the governance model for AI agents, agentic workflows, and their permissions.

What compliance frameworks are supported by the access evidence produced?

The evidence supports frameworks such as SOC 2 and ISO 27001, alongside client assurance and internal audits.

Ready to apply?

The application is on the official WPP careers page.

Apply on company site