IAM Analyst
On-site · London, England, United Kingdom
Job Summary
IAM Analyst to join Universal Music Group's Global Tech Security team. Primary focus is on providing data analysis and reporting across Privileged Access Management (PAM), Identity Governance and Administration (IGA), PKI, and Directory Services, with hands-on work on tools such as CyberArk, Ping Identity, Microsoft EntraID, HashiCorp Vault, Digicert, and Saviynt. Responsibilities include supporting the implementation and enhancement of IAM services (SSO/Federation with SAML/OIDC/WS-Fed, MFA/Passwordless, PAM, IGA, certificate lifecycle automation, directory services), tracking automation scripts (PowerShell, Python, Terraform), communicating design and enforcing access controls and policies aligned with SOX and GDPR, evaluating AI-powered tools to improve identity lifecycle efficiency and risk detection, lifecycle management across accounts/credentials/roles/policies, collaborating with InfoSec, Infrastructure, and App teams for secure identity architecture across on-prem and cloud environments, maintaining documentation and architecture diagrams, and monitoring IAM metrics for performance and audit readiness.
Required Qualifications
- 2+ years of experience in IAM engineering teams
- Proficiency with CyberArk, Ping Identity, Microsoft EntraID (Azure AD), Saviynt, HashiCorp Vault, Digicert
- Understanding of IAM protocols: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT
- Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations
- Ability to work independently and cross-functionally in a global team
- Strong troubleshooting, documentation, and communication skills
- Bachelor’s Degree in Computer Science, Engineering, or related field (preferred)
- Professional Certifications such as CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional
- Experience with AI/ML integration into IAM workflows or security analytics
- Experience in media or entertainment industry IAM environments
- Experience supporting IAM functions in a global, multi-time-zone team
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.