Identity Access Management (IAM) Engineer – Identity Governance and Administration

Job Summary

We are currently seeking an Identity & Access Management Engineer with specialization in Identity Governance & Administration (IGA) to join UMG’s global Tech Security & Identity organization. Reporting to the VP, Tech Security & Identity, this is a hands-on engineering role responsible for designing, implementing, and operating enterprise IGA capabilities across a complex, global environment.

Job Functions

• Design, engineer, deploy, and operate Identity Governance & Administration (IGA) solutions across the enterprise.
• Implement and manage identity lifecycle processes including joiner, mover, and leaver (JML) workflows for employees and non-employee identities.
• Engineer and maintain access request, approval, and provisioning workflows integrated with HR systems, directories, and enterprise applications.
• Design and operate access governance controls including role models, entitlement catalogs, access certifications, and periodic access reviews.
• Partner with application owners and platform teams to onboard applications into IGA and remediate access governance gaps.
• Develop and maintain automation and integrations for IGA workflows using scripting, APIs, and infrastructure-as-code approaches (e.g., PowerShell, Python).
• Support segregation of duties (SoD) controls, access policy enforcement, and audit readiness activities.
• Troubleshoot and resolve complex identity lifecycle, provisioning, and access-related issues across integrated systems.
• Collaborate with Security, HR, Compliance, and Infrastructure teams to ensure identity governance controls align with security policies and regulatory requirements.

Job Requirements

• Essential Qualifications:
  • 5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with a strong focus on Identity Governance & Administration.
  • Demonstrated experience implementing and operating enterprise IGA platforms (e.g., Saviynt, SailPoint, or equivalent).
  • Strong understanding of identity lifecycle management, access provisioning, role-based access control (RBAC), and entitlement governance.
  • Hands-on experience designing and supporting access certification campaigns and remediation processes.
  • Experience integrating IGA solutions with HR systems, Active Directory / Entra ID, and enterprise applications.
  • Proficiency in scripting and automation using tools such as PowerShell or Python.
  • Experience working in hybrid and cloud environments (Azure and/or AWS) with IAM integrations.
  • Ability to independently own complex technical deliverables while collaborating effectively within a global organization.
  • Strong troubleshooting, documentation, and communication skills.
• Desirable Qualifications:
  • Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
  • Experience with advanced IGA capabilities such as role mining, access analytics, or policy-based provisioning.
  • Familiarity with compliance and audit frameworks such as SOX, ISO 27001, NIST, or similar.
  • Professional certifications such as Saviynt Certified Professional, SailPoint Certified IdentityIQ Engineer, Security+, or CISSP.
  • Experience operating IAM or identity governance platforms within a large, global, or highly regulated enterprise environment.

Perks

• Comprehensive medical, dental, and vision coverage.
• Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year).
• Student Loan Repayment Assistance and Tuition Reimbursement.
• Generous paid parental leave for every type of parent.

Disclaimer

This job description only provides an overview of job responsibilities that are subject to change. Universal Music Group is an Equal Opportunity Employer. We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah. Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT. For more information, please click on the following links.

E-Verify Participation Poster: English / Spanish
E-Verify Right to Work Poster: English | Spanish