IAM Engineer

Alexander Mann Solutions Ltd.; City Of London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Alexander Mann Solutions Ltd. is partnering with Universal Music Group UK to recruit an IAM Engineer for a 12-month contract in London with hybrid work (4 days on-site).

You will operate an enterprise IAM environment spanning Active Directory, Entra ID, Microsoft 365, Workday, Saviynt, CyberArk and PAM, joining the Global Technology Operations team.

Qualifications

• Experience in Identity & Access Management (IAM) or Identity Operations.
• Hands-on experience with Active Directory, Entra ID, Microsoft 365, Workday Identity Lifecycle Management, Saviynt, CyberArk or PAM solutions and ServiceNow.
• Experience troubleshooting SSO, SAML, OAuth and OpenID Connect; knowledge of directory synchronization and provisioning workflows.
• Familiarity with identity governance concepts and access controls; ITIL-based environments.

Responsibilities

• Support and operate enterprise IAM services including AD, Entra ID, Microsoft 365, Saviynt, CyberArk, Duo and Workday-driven identity lifecycle.
• Investigate and resolve incidents relating to user accounts, authentication, authorization, access requests, entitlements and privileged access.
• Manage Joiner/Mover/Leaver (JML) processes; troubleshoot provisioning failures and lifecycle exceptions.
• Support Access Governance activities including access reviews, approvals, and audit evidence.
• Troubleshoot SAML, OAuth, OIDC and federation integrations across applications.
• Manage privileged, service, application and non-human identities.
• Monitor IAM platforms using Splunk and dashboards for trends and risks.
• Support a 24x7 follow-the-sun operations model with shifts and on-call handovers.

Skills

Identity & Access Management

Troubleshooting

ITIL knowledge

SSO/OIDC/SAML

Analytical thinking

Tools

Active Directory

Microsoft Entra ID

Microsoft 365

Workday Identity Lifecycle Management

Saviynt

CyberArk

Privileged Access Management (PAM)

ServiceNow

SSO/SAML/OIDC

Job description

We are Universal Music Group UK – the UK's leading music–based entertainment company. We exist to shape culture through the power of artistry. We help UK artists produce, distribute and promote the most critically acclaimed and commercially successful music to inspire and entertain fans at home and around the world.

AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future–ready workplaces. We help organisations adapt, grow, and thrive in an ever–evolving world by building, shaping, and optimising diverse talent strategies.

We partner with UMG UK to support their contingent hiring processes. Acting as an extension of their Talent Acquisition Team, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.

On behalf of UMG, we are looking for a IAM Engineer for a 12 month contract based in London (4 days per week)/remote (Hybrid)

How we LEAD:

We're looking for an IAM Engineer to join our Global Technology Operations team, supporting a complex, enterprise–scale Identity & Access Management (IAM) environment.

As a key member of the Operations Centre, you'll play a critical role in operating, supporting and continuously improving hybrid identity services across Active Directory, Microsoft Entra ID, Microsoft 365, Workday, Saviynt, CyberArk, MFA and privileged access platforms.

This is a hands–on operational role suited to someone who enjoys troubleshooting complex identity challenges, improving processes through automation, and working across a broad range of modern IAM technologies.

How you'll CREATE:

• Support and operate enterprise IAM services including Active Directory, Microsoft Entra ID, Microsoft 365, Saviynt, CyberArk, Duo and Workday–driven identity life cycle processes.
• Investigate and resolve incidents relating to user accounts, authentication, authorisation, access requests, entitlements and privileged access.
• Manage Joiner, Mover, Leaver (JML) processes, troubleshooting provisioning failures, reconciliation issues and identity life cycle exceptions.
• Support Access Governance activities including access reviews, approvals, audit evidence and entitlement management.
• Troubleshoot SAML, OAuth, OIDC and federation integrations across enterprise applications.
• Manage privileged, service, application and non–human identities across the environment.
• Monitor IAM platforms using Splunk and operational dashboards to identify trends, service issues and emerging risks.
• Support a 24x7 follow–the–Sun operations model, including shift work, on–call support and structured handovers.

Bring your VIBE:

• Experience in Identity & Access Management (IAM) or Identity Operations.
• Strong hands–on experience with, Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, Workday Identity Lifecycle Management, Saviynt or another Identity Governance (IGA) platform, CyberArk or Privileged Access Management (PAM) solutions and ServiceNow.
• Experience troubleshooting, SSO, SAML, OAuth and OpenID Connect, Authentication and access issues, Directory synchronisation, Provisioning and reconciliation failures and Identity life cycle processes.
• Knowledge of Identity Governance, least privilege, segregation of duties and access controls.
• Strong analytical and troubleshooting skills with the ability to solve complex operational issues quickly.
• Experience working within ITIL–based service environments.

Diversity, Equity, Inclusion & Belonging at UMG UK

The best way to flourish in our ever–changing industry is to create a team that truly reflects the incredible diversity of our artist roster and society.

We're committed to creating an inclusive culture where everyone can belong, thoughtfully express themselves and bring something unique to our creative journey and our shared passion for music.

Our diversity sets the stage for the creativity, collaboration and innovation that make our artists successful. Here, we want everyone to be seen, supported, valued, respected, and ensure contributions are appreciated and actioned where appropriate.

We can only accept workers operating via an Umbrella or PAYE engagement model.

Please note that for the duration of this assignment you will be working as an external resource engaged by AMS.