Sales Security Engineer

Responsibilities

We are representing a confidential media technology organization seeking a Sales Security Engineer in London. In this role, you will design and implement identity and access controls across modern cloud platforms to reduce account compromise risk and raise control coverage.

Your day-to-day will include:

• Designing conditional access, MFA, and passwordless strategies across enterprise identity platforms including Entra ID, Okta, Microsoft 365, Google Workspace, and AWS IAM Identity Center
• Hardening OAuth app controls, context-aware access policies, DLP configurations, and secure default sharing settings
• Building automation using SCIM, platform APIs, and ServiceNow workflows to meet joiner-mover-leaver SLAs (provision within hours; deprovision within minutes of termination)
• Establishing policy-as-code guardrails and configuration baselines; integrating checks into CI/CD pipelines to prevent drift
• Migrating legacy federation infrastructure to modern SSO; consolidating directories and domains to reduce complexity
• Hardening admin boundaries, IAM roles, and privileged access with just-in-time elevation
• Integrating identity logs into Microsoft Sentinel; building analytics rules and SOAR playbooks to improve alert quality and reduce mean time to response
• Developing identity-focused detections for impossible travel, MFA fatigue, anomalous OAuth consent, and risky access patterns
• Running vulnerability and risk management for identity-linked exposures (weak policies, stale accounts, over-permissive roles) with clear prioritization and SLAs
• Leading or supporting incident response for identity-related events and driving post-incident improvements
• Partnering with engineering and workplace teams to embed secure-by-default patterns
• Mapping controls to ISO 27001, NIST CSF, SOC 2, CIS Benchmarks, and GDPR; supporting audits with evidence and runbooks
• Writing clear standards, architecture documents, integration guides, and operational runbooks
• Measuring and reporting risk reduction metrics against agreed KPIs and roadmaps

What We're Looking For

Required experience and skills:

• Proven identity and access security engineering or architecture experience within enterprise environments
• Hands-on expertise hardening Microsoft Entra ID (Azure AD), Google Workspace Admin, AWS IAM Identity Center, Okta, Microsoft 365, and Active Directory/Entra Connect
• Demonstrated delivery of SSO/MFA/conditional access programs; experience with passwordless and strong authentication methods
• Strong experience with SCIM and API-based integrations for joiner-mover-leaver automation
• ServiceNow access workflows, approvals, and attestation experience
• Privileged access management (Entra PIM/Okta) and admin boundary hardening
• Experience decommissioning legacy federation (e.g., ADFS) and consolidating identity platforms
• Scripting and coding for automation (PowerShell and/or Python; Okta Workflows)
• Threat modeling and architecture review focused on identity misuse, consent abuse, token/session risks, and cloud account takeover
• SIEM/SOAR integration experience, ideally with Microsoft Sentinel (data connectors, analytics rules, playbooks, incident workflows)
• Effective collaboration across platform, workplace, security operations, and data engineering teams
• Clear written and verbal communication skills

Nice-to-have:

• Broader Azure and AWS security architecture experience
• Secrets management (Azure Key Vault, HashiCorp Vault) and application-to-application authentication patterns
• Purple-team or attack path reduction experience for identity
• Compliance program experience (ISO 27001, SOC 2, NIST CSF, GDPR) and audit support
• Consulting or client-facing delivery experience in complex, multi-tenant contexts
• Relevant certifications (Okta Certified Professional, Microsoft/Azure security, AWS Security Specialty, CISSP, CCSP, BCS/TOGAF)

Location and work rights: This is a London-based role. You must have the right to work in the United Kingdom. The client operates a hybrid model with teams in the office approximately four days per week.

How We Work With You

Get A Job.ai is managing this search on behalf of our client. Here's how the process works:

• Apply directly through the Get A Job.ai platform
• Our talent team will review your application and conduct an initial screening
• If you're a strong match, we will submit your profile to the client for consideration
• Please do not contact the client directly—all communication flows through Get A Job.ai to ensure a smooth and professional process

Pay

Pay details will be discussed during the screening process and are dependent on experience and qualifications.

Equal Opportunity: Get A Job.ai is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, color, religion, sex, national origin, age, disability, or any other protected characteristic.