Senior IAM Architect: Global Identity & Access

Universal Music Group; Nashville (TN); On-site; USD 164,000 - 200,000; Full time

Benefits offered by this job

Medical coverage

Mental health coverage

Fertility coverage

Wellbeing stipend

Student Loan help

401(k) vesting

Flexible PTO

Paid holidays

Summer Fridays

Parental leave

Job summary

Universal Music Group seeks a Sr. Identity Access Management Architect to lead enterprise IAM design and delivery across on‑premises and multi‑cloud environments.

You will drive strategies for Access Management, IGA, PAM, PKI, and Directory Services, collaborating with cross‑functional teams and executives to implement scalable, secure identity solutions.

The role emphasizes technical leadership, governance, and modernization initiatives within a globally distributed organization.

Qualifications

• 10+ years of IAM or Security Architecture experience.
• Strong expertise with IAM protocols and cloud identity models.
• Hands-on with CyberArk, PingOne, EntraID, Saviynt, and AD.
• Expert understanding of Authentication, Authorization, PKI, MFA, federation, and PAM.
• Experience designing secure APIs and automating operations.
• Proven leadership across security, infra, compliance teams.
• Experience in multi-cloud and hybrid environments.
• Excellent communication and leadership at all levels.

Responsibilities

• Architect enterprise IAM solutions aligned with security policies and compliance.
• Lead PAM, IGA, SSO, MFA, Federation, PKI, and Directory Services.
• Define technical direction for IAM tools and implementation framework.
• Lead architecture planning for employees, partners, customers, and non-human identities.
• Establish target-state identity architecture and guide engineers.
• Develop secure authentication, authorization, and provisioning workflows.
• Integrate identity services into apps and infra via APIs/automation.
• Engage stakeholders to communicate strategy and drive modernization.
• Create and maintain IAM architecture docs and standards.
• Review designs to ensure security and architecture compliance.

Skills

IAM protocols

Enterprise IAM design

Multi-cloud identity

API security

Cross-functional leadership

Agile environments

Education

Bachelor’s or Master’s Degree in Computer Science or Engineering

CISSP

CISM

Microsoft Identity and Access Administrator

TOGAF

Tools

CyberArk

PingOne

Ping Davinci

EntraID

Saviynt

HashiCorp Vault

DigiCert

Onfido

Active Directory

Job description

Universal Music Group seeks a Sr. Identity Access Management Architect to lead enterprise IAM design and delivery across on‑premises and multi‑cloud environments.

You will drive strategies for Access Management, IGA, PAM, PKI, and Directory Services, collaborating with cross‑functional teams and executives to implement scalable, secure identity solutions.

The role emphasizes technical leadership, governance, and modernization initiatives within a globally distributed organization.