Workplace Identity Specialist

Why we're hiring:

WPP ET provides technology services for WPP. As a creative transformation company, WPP helps its clients shape the future through extraordinary work. Technology Operations (TechOps) within WPP ET underpins this ambition by delivering secure, resilient, and scalable technology services across a highly diverse global footprint.

In APAC, TechOps operates across mature, emerging, and high-growth markets, balancing global standards with regional and local execution realities. The Modern Workplace team plays a critical role in enabling secure collaboration, productivity, and workforce experience at scale.

The Workplace Identity Specialist – APAC is a hands-on technical role within the Modern Workplace team, accountable for the delivery, operation, and continuous improvement of workforce identity and access services across the APAC region.

This role ensures identity platforms and controls enable secure, seamless access to collaboration and productivity services while meeting global security standards and regional operational requirements. This role works at the intersection of global identity strategy and APAC execution—stabilising existing environments, supporting complex market-specific scenarios, and contributing to the design and implementation of future-state identity capabilities.

Operating within the APAC Technology Operations model, this role partners closely with regional InfraOps teams, End User Services, Strategy & Transform, Security, and Global Engineering to improve reliability, compliance, and user experience across highly distributed, multi-tenant environments.

What you'll be doing:

• Deploy, configure, and operate identity services across Microsoft Entra ID (Azure AD), Active Directory, Google Workspace IAM, and Okta in multi-tenant environments.
• Provide APAC operational oversight for workforce identity services, ensuring stability, performance, and availability across diverse markets.
• Support regional tenant consolidations, OpCo integrations, and identity-related aspects of Modern Workplace rollouts and migrations.
• Implement and maintain authentication, authorisation, and access controls including MFA, Conditional Access, SSO, and Zero Trust-aligned policies.
• Integrate collaboration platforms and SaaS applications into the central identity framework in line with global standards.
• Maintain accurate technical documentation, configurations, and operational runbooks for APAC identity services.

• Implement and operate identity governance controls including RBAC/ABAC, access reviews, and lifecycle automation.
• Administer Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions, ensuring least-privilege and just-in-time access.
• Apply global security baselines and identity policies across APAC, providing structured feedback where regional constraints or risks exist.
• Monitor identity services, respond to incidents and service requests escalations and ensure performance of root-cause analysis for recurring access or authentication issues.
• Support audit, risk, and compliance activities by providing evidence, technical input, and remediation actions as required.

• Act as a regional identity subject-matter expert, supporting local TechOps and End User Services teams with complex identity scenarios.
• Bridge global identity strategy and regional execution, ensuring solutions are pragmatic, scalable, and operationally supportable in APAC markets.
• Identify opportunities to simplify, standardise, and automate identity processes to reduce operational overhead and improve user experience.
• Contribute to the design and low-level architecture of future-state identity solutions aligned to WPP’s enterprise and Modern Workplace roadmaps.
• Proactively plan and execute platform enhancements, upgrades, and technical debt remediation.

What you'll need:

• Strong hands-on experience with Microsoft Entra ID (Azure AD), Active Directory, and Okta.
• Proven experience with Identity Governance, Privileged Identity Management (PIM), and Privileged Access Management (PAM).
• Solid understanding of identity lifecycle automation, directory synchronisation, and federation concepts.

• Strong experience with Windows Server and enterprise identity platforms.
• Advanced PowerShell scripting skills; experience with automation and API integration (e.g., Microsoft Graph).
• In-depth knowledge of authentication and authorisation standards including MFA, SAML, OAuth, and SCIM.

• Ability to design and document low-level identity architecture and integration patterns.
• Strong discipline in documentation, configuration management, and operational hygiene.

• Good understanding of security best practices, Zero Trust principles, and audit/compliance requirements in enterprise environments.

• Experience operating in complex, global or regional enterprise environments.
• Exposure to multi-tenant identity platforms and large-scale Modern Workplace transformations.
• Demonstrated ability to work effectively across regional teams, global engineering, and third-party partners.

• Microsoft Certified: Identity and Access Administrator Associate (or equivalent).
• Okta Certified Professional or Administrator.

Who you are: