Identity Access Management (IAM) Engineer – Identity Governance and Administration
Role Overview
We are currently seeking an Identity & Access Management Engineer with specialization in Identity Governance & Administration (IGA) to join UMG’s global Tech Security & Identity organization.
Reporting to the VP, Tech Security & Identity, this is a hands-on engineering role responsible for designing, implementing, and operating enterprise IGA capabilities across a complex, global environment.
This engineer will play a critical role in governing digital identities, access entitlements, and lifecycle processes for employees, contractors, and non-employee populations.
The role emphasizes strong engineering execution, automation, and operational discipline, partnering closely with security, HR, infrastructure, and application teams to ensure access is provisioned appropriately, reviewed regularly, and removed in a timely manner.
The ideal candidate brings deep experience with modern IGA platforms, strong understanding of access governance controls, and the ability to operate at scale in a regulated enterprise.
Key Skills for This Role
Full Job Posting
Job Requirements
- Essential Qualifications
- 5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with a strong focus on Identity Governance & Administration.
- Demonstrated experience implementing and operating enterprise IGA platforms (e.g., Saviynt, SailPoint, or equivalent).
- Strong understanding of identity lifecycle management, access provisioning, role-based access control (RBAC), and entitlement governance.
- Hands-on experience designing and supporting access certification campaigns and remediation processes.
- Experience integrating IGA solutions with HR systems, Active Directory / Entra ID, and enterprise applications.
- Proficiency in scripting and automation using tools such as PowerShell or Python.
- Experience working in hybrid and cloud environments (Azure and/or AWS) with IAM integrations.
- Ability to independently own complex technical deliverables while collaborating effectively within a global organization.
- Strong troubleshooting, documentation, and communication skills.
- Desirable Qualifications
- Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
- Experience with advanced IGA capabilities such as role mining, access analytics, or policy-based provisioning.
- Familiarity with compliance and audit frameworks such as SOX, ISO 27001, NIST, or similar.
- Professional certifications such as Saviynt Certified Professional, SailPoint Certified IdentityIQ Engineer, Security+, or CISSP.
- Experience operating IAM or identity governance platforms within a large, global, or highly regulated enterprise environment.
- Universal Music Group is an Equal Opportunity Employer.
- Diversity & Inclusion
- At Universal Music we are committed to fostering diversity and inclusivity as an equal opportunity employer. We encourage applicants from all backgrounds to apply for our roles regardless of their gender, race, ethnicity, nationality, age, sexual orientation, gender identity, intersex status, marital or family status, neurodiversity, religion or belief, disabilities, or socio-economic background. We also encourage people from all cultural backgrounds to apply, including First Nations people. It is through our diversity and inclusivity that we bring together different perspectives, enhancing our creative and evolving workplace. Music is Universal.
- Disclaimer
- The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive and exhaustive statement.
- Essential
Job Category:
Technology
About Universal Music Group
Public Dutch music-entertainment company producing and publishing recorded music, merchandise, and audiovisual content for artists and audiences.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Universal Music Group
Unified Communications Engineer
London, GBR
Universal Music Group is seeking a Unified Communications Engineer to own infrastructure project delivery, with a focus on enterprise AV deployments and migrations. The role covers AV standards, room design and installat
Manager, Strategic Analytics
Santa Monica, USA
Manager, Artist Relations
Los Angeles, USA
Administrative Assistant
Santa Monica, USA
Unified Communications Engineer
London, GBR
Senior Manager, Production
Los Angeles, USA
Customer Support Specialist
, USA
Director, Privacy and Data Protection
Santa Monica, USA
Vice President, Finance
Philadelphia, USA