IGA Engineer — Identity Governance & Automation

600 UMG Recordings Inc; Nashville (TN); On-site; USD 101,000 - 145,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision coverage

Wellbeing reimbursements (up to $720/年

Student loan repayment

401(k) with immediate vesting

PTO & holidays

Parental leave

Job summary

Universal Music Group (UMG) is seeking an Identity & Access Management Engineer specializing in IGA to join its global Tech Security & Identity team. This hands-on role designs, implements, and operates enterprise IGA capabilities across a complex, multi-region environment, governing digital identities and lifecycle processes for employees and contractors.

The ideal candidate brings deep IGA platform experience (Saviynt/SailPoint), strong access governance knowledge, and the ability to operate

Qualifications

• 5+ years in Identity & Access Management or security engineering with focus on IGA.
• Experience implementing and operating enterprise IGA platforms (Saviynt, SailPoint or equivalent).
• Strong understanding of identity lifecycle management, RBAC and entitlement governance.
• Hands-on experience with JML workflows and access provisioning.
• Experience integrating IGA with HR systems, directories and enterprise apps.
• Proficiency in scripting/automation (PowerShell or Python).
• Experience in hybrid/cloud environments (Azure/AWS) with IAM integrations.

Responsibilities

• Design, engineer, deploy and operate IGA solutions across the enterprise.
• Manage identity lifecycle workflows for employees and non-employee identities.
• Engineer and maintain access request, approval and provisioning workflows.
• Design and operate access governance controls including role models and entitlement catalogs.
• Collaborate with owners to onboard applications into IGA and remediate gaps.
• Develop automation/integration for IGA workflows using scripting and APIs.
• Support SoD controls, policy enforcement and audit readiness.
• Troubleshoot identity lifecycle, provisioning and access issues across systems.
• Collaborate with Security, HR, Compliance and Infrastructure to align with policies.
• Maintain documentation, standards and runbooks for scalable IGA operations.
• Drive improvements in governance maturity and user experience via automation.

Skills

IGA governance

RBAC

SoD controls

Automation scripting

Education

Bachelor’s degree in Computer Science/Info Security/Engineering

Tools

Saviynt

SailPoint

Active Directory/Entra ID

Job description

Universal Music Group (UMG) is seeking an Identity & Access Management Engineer specializing in IGA to join its global Tech Security & Identity team. This hands-on role designs, implements, and operates enterprise IGA capabilities across a complex, multi-region environment, governing digital identities and lifecycle processes for employees and contractors.

The ideal candidate brings deep IGA platform experience (Saviynt/SailPoint), strong access governance knowledge, and the ability to operate