SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scopely, a leading video game and interactive entertainment company (home to MONOPOLY GO!, Pokémon GO, Stumble Guys, and others), is seeking a Senior IAM Security Engineer to join its Information Security team. This is a highly technical, hands-on role based in London with remote flexibility, or fully remote if located outside the UK.
You will design, build, and scale Scopely's identity and access management ecosystem across AWS, GCP, Okta, SaaS applications, AI tooling, and remote access platforms. This role emphasizes Terraform-based IAM automation, least-privilege design, identity risk reduction, and AI-assisted operational workflows.
**Key Responsibilities:**
**Build and Evolve Modern IAM Architecture** — Design and evolve IAM architecture for a high-scale, cloud-first environment. Lead initiatives around federated identity (SAML, OIDC, OAuth, SCIM), workforce identity patterns, least-privilege role design, RBAC/ABAC models, centralized access via Okta and AWS IAM Identity Center, secure cross-account access, service account governance, and Zero Trust identity design. Partner with engineering, infrastructure, and security teams to standardize secure patterns, reduce identity sprawl, improve access visibility, and build scalable controls.
**Own Terraform-Based IAM and Access Automation** — Design, build, and maintain reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns. Create Terraform workflows for Okta app assignments, group-based access, and IAM Identity Center automation. Implement policy-as-code patterns, Terraform-driven onboarding/offboarding flows, service account provisioning automation, and access reporting pipelines. Ensure mature Terraform practices around state management, drift detection, rollback planning, and safe production promotion.
**Automate Identity and Access Workflows** — Build scalable automation for identity lifecycle management, access requests, entitlement changes, and access reviews. Design provisioning/deprovisioning automation, access request workflows, group-based access assignment, Okta app integration automation, IAM Identity Center permission set automation, self-service identity workflows, and operational tooling. Work with Terraform, Python, Bash, PowerShell, APIs, CI/CD systems, Okta Workflows, ServiceNow integrations, and AI tools (Claude Code, Codex).
**Strengthen Identity Security and Risk Reduction** — Lead initiatives to reduce identity-related risk across human and non-human identities. Design controls for excessive permissions, privilege escalation, service account hardening, long-lived credential reduction, cross-account trust hardening, permission boundaries, role lifecycle management, just-in-time access, break-glass workflows, and identity anomaly detection. Use AWS IAM Access Analyzer, CloudTrail, GuardDuty, GCP-native services, Okta System Log, CIEM, and CSPM platforms.
**Improve Zero Trust and Privileged Access Security** — Partner with teams to strengthen Zero Trust and privileged access controls. Support Twingate connectors, identity-aware remote access, Zero Trust segmentation, privileged access workflows, PAM platform integrations (Britive), adaptive access controls, MFA/passwordless adoption, federated access, and secure vendor/contractor access patterns.
**Support Identity Investigations, Monitoring, and Audit Readiness** — Build IAM troubleshooting runbooks, identity detection workflows, access review processes, permission reporting, IAM logging and monitoring design, and operational metrics. Support investigations involving suspicious access, identity abuse, misconfigured integrations, broken federation, risky SaaS integrations, and service account misuse. Collaborate with compliance and audit teams to ensure SOC 2 and ISO 27001 alignment, access review evidence readiness, and clear traceability for privileged access.
**Build AI-Assisted Identity Security Workflows** — Design and improve AI-assisted, automation-first workflows. Lead initiatives around AI-assisted access review analysis, troubleshooting support, intelligent triage, security chatops integrations, identity workflow automation using agents, internal copilots for IAM operations, AI-assisted remediation recommendations, and MCP-enabled identity tooling. Work with Claude Code, MCP-based workflows, agentic automation patterns, and identity telemetry pipelines. Ensure safe AI adoption through guardrails, human oversight, and responsible use practices.
**Requirements:**
The posting excerpt does not include an explicit requirements section. However, the role description implies deep expertise in: AWS and GCP IAM, Okta administration and workflows, Terraform and Infrastructure as Code, Python/Bash/PowerShell scripting, Zero Trust architecture, identity governance and access management, federated identity protocols (SAML, OIDC, OAuth, SCIM), PAM and privileged access workflows, cloud security tooling (IAM Access Analyzer, CloudTrail, GuardDuty, CIEM/CSPM), and modern AI-assisted engineering tools. Experience with identity risk reduction, compliance frameworks (SOC 2, ISO 27001), and large-scale identity system design is expected.
