IAM Engineer

Universal Music Group•Nashville, TN

1d•$101,340 - $145,205

About The Position

Universal Music Group is seeking an Identity & Access Management Engineer specializing in Identity Governance & Administration (IGA) for its global Tech Security & Identity organization. Reporting to the VP, Tech Security & Identity, this hands-on engineering role designs, implements, and operates enterprise IGA capabilities in a complex global environment. The engineer governs digital identities, access entitlements, and lifecycle processes for employees, contractors, and other non-employee populations. The role emphasizes engineering execution, automation, and operational discipline, working closely with security, HR, infrastructure, and application teams to ensure access is appropriately provisioned, regularly reviewed, and removed in a timely manner. The position includes engineering IGA solutions and identity lifecycle workflows; maintaining access request, approval, and provisioning integrations; operating governance controls such as role models, entitlement catalogs, access certifications, and periodic access reviews; and supporting segregation-of-duties controls, policy enforcement, and audit readiness. The engineer also troubleshoots identity and access issues, maintains technical documentation and operational runbooks, and identifies opportunities to improve governance maturity, reduce manual work, and enhance user experience through automation and platform improvements.

Requirements

At least 5 years of hands-on experience in Identity & Access Management or Security Engineering roles, with a strong focus on Identity Governance & Administration.
Demonstrated experience implementing and operating enterprise IGA platforms such as Saviynt, SailPoint, or equivalent.
Strong understanding of identity lifecycle management, access provisioning, role-based access control, and entitlement governance.
Hands-on experience designing and supporting access certification campaigns and remediation processes.
Experience integrating IGA solutions with HR systems, Active Directory or Entra ID, and enterprise applications.
Proficiency in scripting and automation using tools such as PowerShell or Python.
Experience working in hybrid and cloud environments, including Azure and/or AWS, with IAM integrations.
Ability to independently own complex technical deliverables while collaborating effectively within a global organization.
Strong troubleshooting, documentation, and communication skills.

Nice To Haves

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
Experience with advanced IGA capabilities such as role mining, access analytics, or policy-based provisioning.
Familiarity with compliance and audit frameworks such as SOX, ISO 27001, NIST, or similar.
Professional certifications such as Saviynt Certified Professional, SailPoint Certified IdentityIQ Engineer, Security+, or CISSP.
Experience operating IAM or identity governance platforms within a large, global, or highly regulated enterprise environment.

Responsibilities

Design, engineer, deploy, and operate enterprise Identity Governance & Administration solutions.
Implement and manage joiner, mover, and leaver workflows for employees and non-employee identities.
Engineer and maintain access request, approval, and provisioning workflows integrated with HR systems, directories, and enterprise applications.
Design and operate access governance controls, including role models, entitlement catalogs, access certifications, and periodic access reviews.
Partner with application owners and platform teams to onboard applications into IGA and remediate access governance gaps.
Develop and maintain IGA workflow automation and integrations using scripting, APIs, and infrastructure-as-code approaches.
Support segregation-of-duties controls, access policy enforcement, and audit readiness activities.
Troubleshoot and resolve complex identity lifecycle, provisioning, and access-related issues across integrated systems.
Collaborate with Security, HR, Compliance, and Infrastructure teams to align identity governance controls with security policies and regulatory requirements.
Maintain technical documentation, configuration standards, and operational runbooks for scalable and repeatable IGA operations.
Identify opportunities to improve access governance maturity, reduce manual effort, and enhance user experience through automation and platform enhancements.

Benefits

Comprehensive medical, dental, and vision coverage.
100% coverage for out-patient in-network mental health services.
Fertility coverage for eligible medical plan participants.
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and other activities, up to $720 per year.
Student loan repayment assistance and tuition reimbursement.
401(k) with 100% immediate vesting on the first 5% of employee contributions, plus an additional UMG contribution.
Flexible paid time off for exempt employees.
Three weeks of PTO for non-exempt employees.
Two weeks of paid Winter Break.
Ten company holidays, including Juneteenth and Wellbeing Day.
Summer Fridays between Memorial Day and Labor Day.
Paid parental leave.