Sales Security Engineer

About the role

<div class="content-intro"><p><strong>About WPP Media</strong></p> <p>WPP is the trusted growth partner for the world’s leading brands. With exceptional talent, trusted data and intelligence, and world-class partnerships – all united by our pioneering agentic marketing platform, WPP Open – we help clients navigate change, capture opportunity, and deliver transformational growth. </p> <p>WPP Media is WPP's AI-driven media operating unit, bringing together media, data, and partnerships to deliver creative personalisation at scale. Connected through WPP Open and powered by Open Intelligence, clients see exactly where, how, and why their media investment is working.</p> <p>For more information, visit <a href="wppmedia.com">wppmedia.com</a>.</p></div><p><strong>Role Summary and Impact</strong></p> <p><em>DTA is WPP’s global data products and technology company. We’re on a mission to transform marketing by building the fastest, most connected data platform that bridges marketing strategy to scaled activation.</em></p> <p><em>We work with agencies and clients to transform the value of data by bringing together technology, data and analytics capabilities. We deliver this through the Open Media Studio, an AI-enabled media and data platform for the next era of advertising.</em></p> <p><em>We’re endlessly curious. Our team of thinkers, builders, creators and problem solvers are over 1,000 strong, across 20 markets around the world. </em><em>&nbsp;</em></p> <p><strong>Senior Security Engineer </strong></p> <p>We are hiring a Senior Security Engineer based in London to join our Cloud Architecture team, focused on security configuration and identity security across client and internal platforms.</p> <p>This role leads the design and implementation of secure-by-default patterns for identity, access, and configuration in Microsoft Entra ID (Azure AD), Okta, Microsoft 365, Google Workspace, and AWS IAM Identity Center, with strong API/SCIM and ServiceNow integration.</p> <p>You will report to the Head of Cloud Architecture and work closely with Platform Engineering, EUC/Workplace, Security Operations, Data Engineering, and Client Delivery teams.</p> <p>The mission is to improve control coverage, reduce risk and enable frictionless, compliant access for users, applications, and services. You will translate requirements into practical controls and automation, ensuring our platforms meet policy, compliance, and performance goals, including effective monitoring and response through SIEM/SOAR.</p> <p><strong>Area of expertise</strong></p> <ul> <li>Identity security architecture across Entra ID (Azure AD), Okta, Microsoft 365, Google Workspace, and AWS IAM Identity Center.</li> <li>Hardening of identity platforms and SaaS configurations: Google Workspace Admin, Entra ID tenant and CA policies, AWS IAM Identity Center permission sets and SSO.</li> <li>SSO and MFA design and rollout (SAML/OIDC, passwordless, conditional access, device/trust signals).</li> <li>Lifecycle and JML automation using SCIM and HRIS integrations with ServiceNow (and/or Workday).</li> <li>Federation, directory services, and migration (Entra Connect/Azure AD Connect; ADFS decommissioning).</li> <li>Privileged access management and just-in-time elevation (Entra PIM, Okta admin roles, AWS IAM Identity Center assignments).</li> <li>Policy-as-code and configuration baselines for identity/security controls; drift detection and remediation.</li> <li>Identity telemetry, detections, and response via SIEM/SOAR, emphasizing Microsoft Sentinel.</li> <li>External/B2B identity governance, partner access, guest lifecycle, and app consent governance.</li> <li>Alignment to ISO 27001, SOC 2, NIST CSF, CIS Benchmarks, and GDPR.</li> </ul> <p><strong>Skills and Experience</strong></p> <ul> <li>Threat-aware builder who designs for misuse cases and closes gaps with strong defaults.</li> <li>Automates with code and low/no-code workflows (PowerShell, Python, Okta Workflows, ServiceNow).</li> <li>Pragm

Skills