IGA Engineer: Identity Governance & Lifecycle Expert

Universal Music Group; Nashville (TN); On-site; USD 101,000 - 145,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Mental health coverage

Fertility coverage

Wellbeing reimbursements

Student Loan Repayment & Tuition Reimb

401(k) with immediate vesting

Flexible PTO

Parental leave

Job summary

Universal Music Group in Nashville is seeking an Identity & Access Management Engineer specializing in IGA to design, deploy, and operate enterprise IGA capabilities at scale.

Reporting to the VP of Tech Security & Identity, you will partner with Security, HR, Compliance and Infrastructure to ensure timely provisioning, regular reviews, and removal of access. Strong automation with PowerShell/Python and experience with Saviynt/SailPoint are a must.

Qualifications

• 5+ years in Identity & Access Management or Security Engineering with an IGA focus.
• Experience implementing enterprise IGA platforms (Saviynt, SailPoint or equivalent).
• Strong understanding of identity lifecycle, RBAC, and entitlement governance.
• Experience integrating IGA with HR systems, directories and applications.
• Proficient in PowerShell or Python scripting.
• Experience in hybrid/cloud environments (Azure/AWS) with IAM integrations.

Responsibilities

• Design, engineer, deploy and operate IGA solutions across the enterprise.
• Implement identity lifecycle processes (joiner, mover, leaver) for employees and non-employees.
• Engineer and maintain access request, approval, and provisioning workflows integrated with HR systems.
• Design and operate access governance controls including role models, catalogs, certifications.
• Onboard applications into IGA and remediate access governance gaps.
• Develop automation for IGA workflows using scripting, APIs, and infra-as-code (PowerShell, Python).
• Support SoD controls, access policy enforcement, and audit readiness activities.
• Troubleshoot identity provisioning issues across integrated systems.
• Maintain technical documentation and runbooks for scalable IGA operations.
• Identify opportunities to improve access governance maturity via automation.

Skills

IGA (Identity Governance & Admin)

RBAC

JML workflows

SoD controls

Automation with PowerShell/Python

Azure/AWS IAM integration

Security engineering

Education

Bachelor's degree in Computer Science / Information Security / Engineering

Tools

Saviynt

SailPoint

Active Directory / Entra ID

Job description

Universal Music Group in Nashville is seeking an Identity & Access Management Engineer specializing in IGA to design, deploy, and operate enterprise IGA capabilities at scale.

Reporting to the VP of Tech Security & Identity, you will partner with Security, HR, Compliance and Infrastructure to ensure timely provisioning, regular reviews, and removal of access. Strong automation with PowerShell/Python and experience with Saviynt/SailPoint are a must.