IAM Engineer

Universal Music•Nashville, TN

21h

About The Position

UMG is seeking an Identity & Access Management Engineer specializing in Identity Governance & Administration (IGA) to join its global Tech Security & Identity organization. Reporting to the VP, Tech Security & Identity, this hands-on engineering role is responsible for designing, implementing, and operating enterprise IGA capabilities across a complex global environment. The engineer will govern digital identities, access entitlements, and lifecycle processes for employees, contractors, and other non-employee populations. The role emphasizes engineering execution, automation, and operational discipline. The engineer partners with security, HR, infrastructure, and application teams to ensure access is provisioned appropriately, reviewed regularly, and removed promptly. The position requires experience with modern IGA platforms, access governance controls, and operating at scale in a regulated enterprise.

Requirements

At least 5 years of hands-on experience in Identity & Access Management or Security Engineering roles, with a strong focus on Identity Governance & Administration.
Demonstrated experience implementing and operating enterprise IGA platforms such as Saviynt, SailPoint, or equivalent.
Strong understanding of identity lifecycle management, access provisioning, role-based access control (RBAC), and entitlement governance.
Hands-on experience designing and supporting access certification campaigns and remediation processes.
Experience integrating IGA solutions with HR systems, Active Directory / Entra ID, and enterprise applications.
Proficiency in scripting and automation using tools such as PowerShell or Python.
Experience working in hybrid and cloud environments (Azure and/or AWS) with IAM integrations.
Ability to independently own complex technical deliverables while collaborating effectively within a global organization.
Strong troubleshooting, documentation, and communication skills.

Nice To Haves

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
Experience with advanced IGA capabilities such as role mining, access analytics, or policy-based provisioning.
Familiarity with compliance and audit frameworks such as SOX, ISO 27001, NIST, or similar.
Professional certifications such as Saviynt Certified Professional, SailPoint Certified IdentityIQ Engineer, Security+, or CISSP.
Experience operating IAM or identity governance platforms within a large, global, or highly regulated enterprise environment.

Responsibilities

Design, engineer, deploy, and operate enterprise Identity Governance & Administration (IGA) solutions.
Implement and manage joiner, mover, and leaver (JML) identity lifecycle workflows for employees and non-employee identities.
Engineer and maintain access request, approval, and provisioning workflows integrated with HR systems, directories, and enterprise applications.
Design and operate access governance controls, including role models, entitlement catalogs, access certifications, and periodic access reviews.
Partner with application owners and platform teams to onboard applications into IGA and remediate access governance gaps.
Develop and maintain IGA workflow automation and integrations using scripting, APIs, and infrastructure-as-code approaches.
Support segregation of duties (SoD) controls, access policy enforcement, and audit readiness activities.
Troubleshoot and resolve complex identity lifecycle, provisioning, and access-related issues across integrated systems.
Collaborate with Security, HR, Compliance, and Infrastructure teams to align identity governance controls with security policies and regulatory requirements.
Maintain technical documentation, configuration standards, and operational runbooks for scalable, repeatable IGA operations.
Identify opportunities to improve access governance maturity, reduce manual effort, and enhance user experience through automation and platform improvements.

Benefits

Comprehensive medical, dental, and vision coverage, including 100% coverage for out-patient in-network mental health services.
Fertility coverage for eligible medical plan participants.
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and other expenses, up to $720 per year.
Student Loan Repayment Assistance and Tuition Reimbursement.
401(k) with 100% immediate vesting on the first 5% of contributions, plus an additional UMG contribution.
Flexible Paid Time Off for exempt employees; three weeks of PTO for non-exempt employees.
Two weeks of paid Winter Break.
Ten company holidays, including Juneteenth and Wellbeing Day.
Summer Fridays between Memorial Day and Labor Day.
Paid parental leave for every type of parent.