IAM Engineer

We are Universal Music Group UK - the UK's leading music-based entertainment company. We exist to shape culture through the power of artistry. We help UK artists produce, distribute and promote the most critically acclaimed and commercially successful music to inspire and entertain fans at home and around the world.

AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future-ready workplaces. We help organisations adapt, grow, and thrive in an ever-evolving world by building, shaping, and optimising diverse talent strategies.

We partner with UMG UK to support their contingent hiring processes. Acting as an extension of their Talent Acquisition Team, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.

On behalf of UMG, we are looking for a IAM Engineer for a 12 month contract based in London (4 days per week) / remote (Hybrid)

How we LEAD:

We're looking for an IAM Engineer to join our Global Technology Operations team, supporting a complex, enterprise-scale Identity & Access Management (IAM) environment.

As a key member of the Operations Centre, you'll play a critical role in operating, supporting and continuously improving hybrid identity services across Active Directory, Microsoft Entra ID, Microsoft 365, Workday, Saviynt, CyberArk, MFA and privileged access platforms.

This is a hands-on operational role suited to someone who enjoys troubleshooting complex identity challenges, improving processes through automation, and working across a broad range of modern IAM technologies.

How you'll CREATE:

• Support and operate enterprise IAM services including Active Directory, Microsoft Entra ID, Microsoft 365, Saviynt, CyberArk, Duo and Workday-driven identity lifecycle processes.
• Investigate and resolve incidents relating to user accounts, authentication, authorisation, access requests, entitlements and privileged access.
• Manage Joiner, Mover, Leaver (JML) processes, troubleshooting provisioning failures, reconciliation issues and identity lifecycle exceptions.
• Support Access Governance activities including access reviews, approvals, audit evidence and entitlement management.
• Troubleshoot SAML, OAuth, OIDC and federation integrations across enterprise applications.
• Manage privileged, service, application and non-human identities across the environment.
• Monitor IAM platforms using Splunk and operational dashboards to identify trends, service issues and emerging risks.
• Support a 24x7 follow-the-sun operations model, including shift work, on-call support and structured handovers.

Bring your VIBE:

• Experience in Identity & Access Management (IAM) or Identity Operations.
• Strong hands-on experience with, Active Directory, Microsoft Entra ID (Azure AD), Microsoft 365, Workday Identity Lifecycle Management, Saviynt or another Identity Governance (IGA) platform, CyberArk or Privileged Access Management (PAM) solutions and ServiceNow.
• Experience troubleshooting, SSO, SAML, OAuth and OpenID Connect, Authentication and access issues, Directory synchronisation, Provisioning and reconciliation failures and Identity lifecycle processes.
• Knowledge of Identity Governance, least privilege, segregation of duties and access controls.
• Strong analytical and troubleshooting skills with the ability to solve complex operational issues quickly.
• Experience working within ITIL-based service environments.

Diversity, Equity, Inclusion & Belonging at UMG UK

The best way to flourish in our ever-changing industry is to create a team that truly reflects the incredible diversity of our artist roster and society.

We're committed to creating an inclusive culture where everyone can belong, thoughtfully express themselves and bring something unique to our creative journey and our shared passion for music.

Our diversity sets the stage for the creativity, collaboration and innovation that make our artists successful. Here, we want everyone to be seen, supported, valued, respected, and ensure contributions are appreciated and actioned where appropriate.

Next Steps

If you are interested in applying for this position and meet the criteria outlined above, please click the link to apply and we will contact you with an update in due course.

We can only accept workers operating via an Umbrella or PAYE engagement model.

Please note that for the duration of this assignment you will be working as an external resource engaged by AMS.