IAM Engineer - SSO

Music is Universal

It’s the passionate and dedicated team at Universal Music who help make us the world’s leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.

Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.

We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email Uni

We are currently seeking an Identity & Access Management Engineer with specialization in Access Management to join UMG’s global Tech Security & Identity organization. Reporting to the Manager, Access Management

VP, Tech Security & Identity, this is a hands-on engineering role responsible for designing, implementing, and operating enterprise access management capabilities across a global, hybrid environment – including workforce, partner, customer, and consumer experiences.

This engineer will play a critical role in securing authentication and authorization for workforce and application access, delivering scalable solutions across Single Sign-On (SSO), federation, and multi-factor authentication (MFA). The role emphasizes strong technical execution, platform reliability, and automation, working closely with application, infrastructure, and security teams to enable secure access while maintaining a strong user experience. The ideal candidate brings deep experience with modern access management platforms and protocols, and the ability to operate access services at enterprise scale.

• Design, engineer, deploy, and operate Access Management solutions across the enterprise.

• Implement and support Single Sign-On (SSO) and federation services using modern identity protocols.

• Engineer and maintain authentication and authorization services including MFA, adaptive access, and conditional access policies.

• Integrate applications and platforms with enterprise access management systems across on-premises and cloud environments.

• Partner with application owners and platform teams to onboard applications to SSO and enforce consistent authentication standards.

• Design and maintain secure federation integrations using protocols such as SAML, OAuth 2.0, and OpenID Connect (OIDC).

• Develop and maintain automation and tooling to support access onboarding, configuration, and lifecycle management.

• Troubleshoot and resolve complex authentication, authorization, and federation issues impacting users or applications.

• Ensure access management services meet availability, performance, and resiliency requirements in a global environment.

• Support audit, compliance, and security review activities related to access controls and authentication mechanisms.

• Maintain technical documentation, standards, and runbooks for access management platforms and integrations.

• Continuously improve access security and user experience through platform enhancements, automation, and adoption of modern authentication patterns.

• 5+ years of hands‑on experience in Identity & Access Management or Security Engineering roles, with strong focus on Access Management.

• Demonstrated experience implementing and operating enterprise access management platforms (e.g., Ping Identity, Okta, Microsoft Entra , or equivalent).

• Strong understanding of authentication and authorization concepts, including SSO, federation, MFA, and adaptive access.

• Hands‑on…