IAM Engineer - SSO

The role

You will govern who and what can access DTS systems, data, APIs, tools, workflows and AI-enabled capabilities. You will own access reviews, privileged access, external user and service account governance, and access rules for AI agents. You report to the SVP Security and Compliance.

What you will do

• Define and maintain the access governance framework for DTS.
• Own regular access reviews and recertification across DTS.
• Govern privileged access to production, cloud, security tools and sensitive platforms.
• Govern access for external users, clients, partners and vendors.
• Govern service accounts, machine identities, API keys and tokens.
• Define how AI agents are identified, permissioned, monitored and revoked.
• Govern dataset and sensitive data access, including cross-client and cross-market access.
• Govern access to tools, workflows and high-risk actions, including segregation of duties.
• Produce access governance evidence for SOC 2, ISO 27001 and client assurance.
• Escalate material access risks through the DTS risk process.

Required qualifications

• Experience in identity governance, access management, IAM, security governance, GRC, data access control or platform security.
• Strong understanding of least privilege, role-based access control, attribute-based access control, access reviews, privileged access and segregation of duties.
• Experience governing access across SaaS platforms, cloud environments, APIs, data platforms or enterprise technology estates.
• Knowledge of identity platforms such as Okta, Auth0, Keycloak, Azure AD / Entra ID or similar.
• Understanding of service accounts, machine identities, API keys, tokens, secrets and non-human access governance.
• Understanding of data classification, dataset access governance, privacy-by-design and audit requirements.
• Ability to work across security, architecture, product, engineering, infrastructure, legal, privacy and compliance teams.
• Strong organisational skills and ability to coordinate reviews, evidence, remediation and reporting.
• Ability to translate complex access issues into clear risks, controls and practical actions.

Nice to have

• Understanding of AI agents, agentic workflows, delegated authority and tool-access governance.

Benefits

• Passionate, inspired people and a culture in which people can do extraordinary work.
• Scale and opportunity to create, influence and complete projects at industry-leading scale.
• Challenging and stimulating work with a group of creative problem solvers.

Before you apply

• Hybrid working is expected, with teams in the office around four days a week.
• Accommodations or flexibility can be discussed with the hiring team during the interview process.

About the company

WPP is a growth partner for the world's leading brands, combining media intelligence, data, creativity, production, enterprise solutions and strategic counsel. It works with major brands across 100+ markets.