Identity Access Management (IAM) Engineer

Job Summary

We are currently seeking an Identity & Access Management Engineer with specialization in Cyber Ark and Public Key Infrastructure (PKI) to join UMG’s global Tech Security & Identity organization.

Reporting to the Manager, PAM & PKI, this is a hands‑on engineering role responsible for designing, implementing, and operating enterprise‑grade privileged access and certificate‑based security capabilities across a global, hybrid environment.

This engineer will play a critical role in securing privileged user access, service accounts, application credentials, and machine identities through Cyber Ark, while also engineering and operating global PKI services that secure and establish trust across infrastructure, applications, automated workloads, and all of UMG’s public‑facing websites.

The role emphasizes deep technical execution, automation, and operational excellence, partnering closely with infrastructure, security, and application teams to reduce risk and strengthen identity security at scale.

• Job Functions
• Design, engineer, deploy, and operate Privileged Access Management solutions using Cyber Ark, 1Password, Hashicorp Vault, and other privileged tooling across the enterprise.
• Administer and enhance Cyber Ark components including Vault, CPM, PVWA, PSM, and related integrations.
• Implement and manage privileged access controls for users, service accounts, application credentials, and non‑human identities.
• Engineer and operate enterprise PKI services, including certificate issuance, renewal, revocation, and lifecycle management.
• Administer and enhance PKI platforms such as Microsoft AD Certificate Services (ADCS), Digi Cert, and Keyfactor certificate lifecycle management tooling.
• Manage and support public and private certificates used for infrastructure, applications, and secure service‑to‑service communication.
• Integrate Cyber Ark and PKI capabilities into applications, platforms, and cloud environments to enable secure privileged and machine‑based access.
• Develop and maintain automation for Cyber Ark and PKI workflows using scripting and API‑based integrations (e. g., Power Shell, Python).
• Partner with infrastructure, cloud, and application teams to onboard systems into Cyber Ark and PKI services and remediate security gaps.
• Troubleshoot and resolve complex Cyber Ark‑ and PKI‑related issues, including credential failures, certificate outages, and access disruptions.
• Ensure PAM and PKI services meet availability, resiliency, and operational performance requirements in a global environment.
• Support audit, compliance, and security review activities related to privileged access and cryptographic controls.
• Maintain technical documentation, configuration standards, and operational runbooks to support scalable operations.
• Continuously improve privileged access and PKI maturity through automation, platform enhancements, and process optimization.
• Job Requirements

Essential Qualifications

• 5+ years of hands‑on experience in Identity & Access Management or Security Engineering roles, with strong focus on Cyber Ark and PKI.
• Demonstrated enterprise experience implementing and operating Cyber Ark PAM solutions.
• Strong hands‑on experience with PKI concepts and technologies, including certificate lifecycle management, trust models, and cryptographic standards.
• Experience administering Microsoft AD Certificate Services (ADCS) and managing public SSL/TLS certificates.
• Solid understanding of privileged access concepts including credential vaulting, session management, and least privilege.
• Proficiency in scripting and automation using tools such as Power Shell or Python.
• Experience integrating Cyber Ark and PKI solutions with Active Directory, cloud platforms (Azure and/or AWS), and enterprise applications.
• Ability to independently own complex technical implementations while collaborating across a global organization.
• Strong troubleshooting, documentation, and communication skills.

Desirable Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.
• Cyber Ark certifications such as Cyber Ark Defender or equivalent.
• Experience with certificate management platforms such as Keyfactor or Venafi.
• Experience integrating PAM or PKI into CI/CD pipelines, Dev Ops workflows, or secrets management solutions.
• Familiarity with security and compliance frameworks such as SOX, ISO 27001, or NIST.
• Experience operating IAM or security platforms within a large, global, or highly regulated enterprise.

Universal Music Group is an Equal Opportunity Employer.

#J-18808-Ljbffr