Identity Access Management (IAM) Engineer – CyberArk & PKI

Job Requirements

• Essential Qualifications
• 5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with strong focus on CyberArk and PKI.
• Demonstrated enterprise experience implementing and operating CyberArk PAM solutions.
• Strong hands-on experience with PKI concepts and technologies, including certificate lifecycle management, trust models, and cryptographic standards.
• Experience administering Microsoft AD Certificate Services (ADCS) and managing public SSL/TLS certificates.
• Solid understanding of privileged access concepts including credential vaulting, session management, and least privilege.
• Proficiency in scripting and automation using tools such as PowerShell or Python.
• Experience integrating CyberArk and PKI solutions with Active Directory, cloud platforms (Azure and/or AWS), and enterprise applications.
• Ability to independently own complex technical implementations while collaborating across a global organization.
• Strong troubleshooting, documentation, and communication skills.
• Desirable Qualifications
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
• CyberArk certifications such as CyberArk Defender or equivalent.
• Experience with certificate management platforms such as Keyfactor or Venafi.
• Experience integrating PAM or PKI into CI/CD pipelines, DevOps workflows, or secrets management solutions.
• Familiarity with security and compliance frameworks such as SOX, ISO 27001, or NIST.
• Experience operating IAM or security platforms within a large, global, or highly regulated enterprise
• Universal Music Group is an Equal Opportunity Employer.
• Diversity & Inclusion
• At Universal Music we are committed to fostering diversity and inclusivity as an equal opportunity employer. We encourage applicants from all backgrounds to apply for our roles regardless of their gender, race, ethnicity, nationality, age, sexual orientation, gender identity, intersex status, marital or family status, neurodiversity, religion or belief, disabilities, or socio-economic background. We also encourage people from all cultural backgrounds to apply, including First Nations people. It is through our diversity and inclusivity that we bring together different perspectives, enhancing our creative and evolving workplace. Music is Universal.
• Disclaimer
• The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive and exhaustive statement.
• Essential

Job Category: