Job Description

We are UMG, the Universal Music Group. We are the world\xe2\x80\x99s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

The Global Technology - Identity & Security Organization protects user identity on UMG systems supporting enterprise users, labels/artists and business partner users around the world. The Identity & Security Organization is staffed with security practitioners that perform technical security assessments (APPSEC), security findings remediation, and other advanced security capabilities.

The Customer Identity & Access Management (CIAM) Engineer reports to the Sr. Manager, Identity & Access Management, and is responsible for designing and implementing external identity and access management solutions used to support the integration of consumer facing applications and partner access. The CIAM Engineer will support various corporate initiatives using external identity management with custom software and automation to facilitate sophisticated authentication and authorization scenarios.

How you\'ll CREATE:

Design and deliver centralized CIAM solutions across multiple diverse business domains and application architectures including solutions for API-driven cloud and cloud/hybrid-based applications.

Deliver custom CIAM solutions that fulfill requirements not met by standard out-of-box functionality.

Integrate applications with Security Assertion Markup Language (SAML), Open Authorization (OAuth), OpenID Connect (OIDC), JSON Web Token (JWT), or other industry standard authentication and/or authorization solutions.

Engage in hands-on support of advanced identity solutions, including CI/CD architecture, custom interfaces and automation

Provide architectural and technical guidance to other department/division security initiatives developing countermeasures used to safeguard information against accidental or unauthorized modification, destruction, or disclosure.

Ensure customer-facing work processes and technical solutions are clearly documented with roles and responsibilities.

Bring your VIBE:

Extensive experience with Identity and Access Management concepts such as authentication, authorization, application security, privacy and consent management, regulatory compliance, multi-factor authentication, federation, and risk management

Experience with Linux, Windows, scripting (Bash, PowerShell, Perl), Structured Query Language (SQL), Lightweight Directory Access Protocol (LDAP), and web services

Effective communication with end users, technical IT teams, business partners, network providers, and outsourced vendors spanning diverse cultural and technical backgrounds in a global environment

Bachelor\xe2\x80\x99s Degree in Computer Science, Engineering, Network Security, or related field with 7+ years related industry experience

Industry certifications such as CISSP, GISP, GSEC, GCLD, Security+, or ITIL v3 Foundation

Perks Playlist:

Be part of an entrepreneurial, global organization that values authenticity, drive, creativity, relationships, and a competitive spirit

Comprehensive medical, dental, vision, and FSA options, as well as:

100% coverage for out-patient mental health services

Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)

A lifetime fertility support allowance of $30,000 to plan participants

Student Loan Repayment Assistance and Tuition Reimbursement

100% immediately vested 401(k) match on the first 5% of your contribution on eligible compensation

Variety of ways to prioritize much-needed time away from work including:

Flexible Paid Time Off (PTO) for exempt employees

3-weeks PTO for non-exempt employees

2-weeks paid Winter Break

10 Company Holidays (including Juneteenth and Wellbeing Day)

Summer Fridays (between Memorial Day and Labor Day)

Generous paid parental leave for every type of parent

Check out our full overview of benefits on the of the career site.

Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.

Universal Music Group is an Equal Opportunity Employer

We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.

For more information, please click on the following links.

E-Verify Participation Poster:

E-Verify Right to Work Poster: |

Job Category: Technology

Salary Range: $96,520 - $169,100

The actual base salary offered depends on a variety of factors, which may include, as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job. All candidates are encouraged to apply.

Universal Music