IAM Engineer - SSO

原始資料於 2026-11-04T15:04:49.060363+00:00 查閱；內容可能已更新，請查看原始職位。

What you'll need:
The successful candidate will have:
Experience in identity governance, access management, IAM, security governance, GRC, data access control or platform security.
Strong understanding of least privilege, role-based access control, attribute-based access control, access reviews, privileged access and segregation of duties.
Experience governing access across SaaS platforms, cloud environments, APIs, data platforms or enterprise technology estates.
Knowledge of identity platforms such as Okta, Auth0, Keycloak, Azure AD / Entra ID or similar.
Understanding of service accounts, machine identities, API keys, tokens, secrets and non-human access governance.
Understanding of AI agents, agentic workflows, delegated authority and tool-access governance would be highly valuable.
Understanding of data classification, dataset access governance, privacy-by-design and audit requirements.
Ability to work across security, architecture, product, engineering, infrastructure, legal, privacy and compliance teams.
Strong organisational skills and ability to coordinate reviews, evidence, remediation and reporting.
Ability to translate complex access issues into clear risks, controls and practical actions.
Leadership expectations
The Senior Identity and Access Security Engineer is expected to:
Be structured, disciplined and pragmatic.
Bring clarity to complex access and permission models.
Challenge excessive, unclear or poorly governed access.
Work constructively with product and engineering teams to design workable controls.
Avoid creating unnecessary bureaucracy while ensuring access is properly governed.
Treat human, machine and agent access as part of the same control landscape.
Escalate material access risks clearly and early.
Support DTS in building a secure, auditable and scalable access governance model.
Success measures
Success in the role will be measured by:
DTS having clear identity, access and data access governance standards.
Regular access reviews completed on schedule with evidence.
Reduction in stale, excessive, orphaned or poorly owned access.
Stronger governance of privileged access and production access.
Clear ownership and review of service accounts, machine identities, API keys and tokens.
Defined governance for AI agent identities, permissions and actions.
Improved auditability of access to data, APIs, tools, workflows and production systems.
Better alignment between identity, security, privacy, architecture, product and engineering teams.
Material access risks being visible through the DTS risk register and Risk Review Board.
Increased confidence that DTS can answer: who or what has access to what, why, and when was it last reviewed?
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.
What we'll give you:
Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?
#LI-Hybrid
We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.
WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.
Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.