IAM Analyst

Universal Music; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

A leading global music company is seeking an IAM Engineer to enhance identity and access management systems. The ideal candidate will have at least 2 years of experience in IAM engineering, proficiency with tools like CyberArk and Ping Identity, and a good understanding of IAM protocols. This full-time role entails collaborating with various teams to implement IAM services and ensure secure identity architecture across platforms. Opportunities for personal and professional growth abound in a diversity-focused environment.

Qualifications

• 2 years of experience in IAM engineering teams.
• Understanding IAM protocols and standards such as SAML and OAuth2.
• Strong troubleshooting and communication skills.

Responsibilities

• Research and provide data analysis for IAM tools.
• Support enhancement of IAM services including SSO and MFA.
• Collaborate with InfoSec and Infrastructure teams.

Skills

Experience with IAM engineering

Proficiency in CyberArk, Ping Identity

Understanding of IAM protocols

Familiarity with cloud platforms

Troubleshooting skills

Communication skills

Python

Education

Bachelor's Degree in Computer Science or related field

Tools

PowerShell

Terraform

Microsoft EntraID

Job description

Music is Universal

Its the passionate and dedicated team at Universal Music who help make us the worlds leading music company. From A&R to finance legal to digital sales to marketing Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.

Everyone is welcome to apply for our roles and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender race disability sexual orientation religion belief age marital status background pregnancy or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism dyslexia ADHD and other forms of neurocognitive variation.

We will always seek to make appropriate adjustments to recruitment workplaces and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards including alternatives to the online form or to disclose a neurocognitive condition please email

Job Summary

We are UMG the Universal Music Group. We are the worlds leading music everything we do we are committed to artistry innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music music publishing merchandising and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters and we produce distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Job Functions

• Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert and Saviynt.
• Support the implementation and enhancement of IAM services including SSO / Federation (SAML OIDC WS-Fed), MFA / Passwordless, Privileged Access Management (PAM), Identity Governance (IGA), PKI and certificate lifecycle automation, Directory services (AD EntraID).
• Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python or Terraform.
• Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.).
• Evaluate AI‑powered tools and methodologies to improve identity lifecycle efficiency, risk detection and operational decision‑making.
• Participate in lifecycle management processes for accounts, credentials, roles and policies across systems and applications.
• Collaborate with InfoSec, Infrastructure and App teams to ensure secure identity architecture for on‑prem and cloud environments.
• Maintain high‑quality documentation and architectural diagrams.
• Monitor and report metrics on IAM system performance, adoption and audit readiness.

Job Requirements

Essential Qualifications

• 2 years of experience in IAM engineering teams.
• Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido.
• Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT.
• Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations.
• Proven ability to work independently and cross‑functionally in a global team.
• Strong troubleshooting, documentation and communication skills.
• Strong communication skills for both technical details and business acumen.

Desirable

• Bachelors Degree in Computer Science, Engineering or a related technical field.
• Professional certifications such as: CISSP, Security Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional.
• Experience with AI / ML integration into IAM workflows or security analytics.
• Experience supporting IAM functions in media or entertainment industry environments.
• Experience working on a global team covering multiple time zones.

Key Skills

• ArcGIS
• Intelligence Community Experience
• GIS
• Python
• Computer Networking
• Data Collection
• Intelligence Experience
• R
• Relational Databases
• Analysis Skills
• Data Management
• Application Development

Job Category

Universal Music Group

Required Experience

IC

Employment Type

Full-Time

Experience

years

Vacancy

1