IAM Engineer
Universal Music Group3 days ago
Nashville, TN, USASenior
Base Salary
$101k - $145k/yr
Responsibilities
- Design, engineer, deploy, and operate enterprise Identity Governance & Administration solutions.
- Implement and maintain joiner, mover, and leaver identity lifecycle workflows for employees, contractors, and other populations.
- Engineer access request, approval, provisioning, access certification, access review, role, and entitlement governance processes.
- Integrate IGA solutions with HR systems, directories, and enterprise applications, and onboard applications into the platform.
- Develop and maintain automation and integrations using scripting, APIs, and infrastructure-as-code approaches.
- Support segregation-of-duties controls, access policy enforcement, audit readiness, troubleshooting, documentation, and operational runbooks.
- Collaborate with security, HR, compliance, infrastructure, application, and platform teams to improve governance maturity and reduce manual effort.
Requirements
- At least 5 years of hands-on experience in IAM or security engineering, focused on Identity Governance & Administration.
- Experience implementing and operating enterprise IGA platforms such as Saviynt, SailPoint, or equivalent.
- Strong knowledge of identity lifecycle management, access provisioning, role-based access control, and entitlement governance.
- Hands-on experience with access certification campaigns and remediation processes.
- Experience integrating IGA solutions with HR systems, Active Directory or Entra ID, and enterprise applications.
- Proficiency with scripting and automation using PowerShell or Python.
- Experience in hybrid and cloud environments using Azure and/or AWS with IAM integrations.
- Ability to own complex technical deliverables independently and collaborate in a global organization.
- Strong troubleshooting, documentation, and communication skills.
- A bachelor's degree in Computer Science, Information Security, Engineering, or a related technical discipline is desirable.
- Advanced IGA experience such as role mining, access analytics, or policy-based provisioning is desirable.
- Familiarity with SOX, ISO 27001, NIST, or similar compliance and audit frameworks is desirable.
- Professional certifications such as Saviynt Certified Professional, SailPoint Certified IdentityIQ Engineer, Security+, or CISSP are desirable.
- Experience with IAM or identity governance platforms in a large, global, or highly regulated enterprise is desirable.
Benefits
- Comprehensive medical, dental, and vision coverage, including full coverage for eligible out-patient in-network mental health services.
- Fertility coverage, wellbeing reimbursements, student loan repayment assistance, and tuition reimbursement.
- 401(k) with immediate vesting on the first 5% of employee contributions plus an additional UMG contribution.
- Flexible PTO for exempt employees, three weeks of PTO for non-exempt employees, a two-week paid Winter Break, 10 company holidays, and Summer Fridays.
- Generous paid parental leave for every type of parent.
About Universal Music Group
Universal Music Group is a public music-entertainment company that produces, distributes, and licenses recorded music; operates music publishing; and runs artist merchandising and audiovisual content businesses. It owns labels such as Interscope, Republic, Def Jam, Capitol, and Deutsche Grammophon, and works across more than 60 countries. Headquartered in Santa Monica, California, it is listed on Euronext Amsterdam and generates revenue from streaming and physical sales, licensing, publishing royalties, and merchandise.