Identity Operations Engineer

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

As a key member of the UMG Operations Center, the Identity and Access Management Engineer is responsible for ensuring our Identity Management and Messaging environments, including Active Directory functions at peak efficiency. The position will be a team player working to expand the integration of our identity management solutions with our enterprise applications, support day-to-day administration, reporting, troubleshooting, and operations of our Identity Management environment.

In addition to having strong technical skills, you must be comfortable in effectively communicating with business end users, technical IT teams, business partners, network providers, and business process outsourced vendors, all while being sensitive to a wide diversity of cultural and technical backgrounds in a global business environment.

• Utilize best practices to ensure that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss.
• Troubleshoots and resolves issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions.
• ITIL-based operation support and acts as a technical resource for the Active Directory infrastructure, including incident, change, and problem management.
• Provides support of on premise and cloud-based equipment and configuration including but not limited to Domain Controllers, SaaS applications such as Azure Active Directory, M365, Duo, Cyber Ark, Yubi Key, Microsoft Identity Management, Splunk, and Active Roles servers.
• Complete the key metric reporting and analysis for the Identity Management environment as required.
• Work to ensure audit tasks related to Identity Management are completed on time, with participation of appropriate parties.
• Participate in security incident response teams as needed.
• Utilize industry best practices for appropriate standards, processes, procedures, tools, and documentation.
• Ensure the maintenance, patching, operating, and monitoring of IAM systems is in place and completed on schedule.
• Participate in on-call rotation, and as such, work outside of standard business hours will occasionally be required.
• Participate in developing automation to reduce the time spent on routine tasks.
• This position will be shift-based.

• Solid technical skills in the Identity Management space, including Active Directory.
• Minimum of five years directly related experience in Identity & Access Management (IAM).
• A strong ability for troubleshooting and problem analysis is required, along with the ability to clearly communicate the results of problem analysis to business stakeholders, IT support teams, and network providers to quickly and effectively resolve operational issues.
• Experience troubleshooting and solving issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions.
• Hands on experience of Active Directory operation and support including Active Directory Infrastructure components (FSMO roles), delegated administration, group policies, OU admin & Site replication, ADFS, Exchange operation and support including OWA, SMTP services, and routing / costing.
• Customer service driven/focused with a proactive and positive can-do approach. Demonstrates commitment to organization’s policy framework and practices continuous improvement.
• Hands-on experience and skills with systems such as M365 and Service Now are required. Experience with Service Now orchestration into Active Directory, M365, Zoom, Slack, Box, or Teams is a plus.
• Demonstrated current work experience…