Identity and Access Management (IAM) Engineer

We are UMG, the Universal Music Group. Job Functions: • Engineer, deploy, and maintain IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. • Lead and support the implementation and enhancement of IAM services including: • SSO/Federation (SAML, OIDC, WS-Fed) • MFA/Passwordless • Privileged Access Management (PAM) • Identity Governance (IGA) • PKI and certificate lifecycle automation • Directory services (AD, EntraID) • Build automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Essential Qualifications • 5+ years of hands-on experience in IAM engineering roles • Deep technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido • Solid understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT • Experience with automation tools and scripting (e.g., PowerShell, Python, Terraform) • Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations • Strong understanding of IAM-related compliance frameworks and controls (e.g., SOX, ISO 27001, NIST) • Proven ability to work independently and cross-functionally in a global team • Strong troubleshooting, documentation, and communication skills The actual base salary offered depends on a variety of factors, which may include, as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.

Create an account to see the full posting, access our search engine, and more.