Sr. Identity Access Management Architect

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world. We are currently seeking an experienced Sr. Identity Access Management Architect to lead architectural design, strategic planning, and delivery across the full Identity & Access Management landscape. The Sr. Identity Access Management Architect will play a critical role in shaping UMG’s global identity ecosystem across areas such as Access Management, IGA, PAM, Directory Services, and PKI. This hands-on role will drive scalable and secure identity solutions, leading complex integrations across on-premises and multi-cloud environments. The successful candidate will possess deep technical expertise, a strategic mindset, and a strong ability to influence cross-functional teams and executive stakeholders. Job Functions: Architect and design enterprise-wide IAM solutions aligned with business goals, security policies, and compliance requirements. Provide [... source excerpt omitted ...] or implementation across the company with an emphasis on standard configurations. Lead architecture planning and lifecycle designs for all personas including employees, partners, customers, and non-human identities. Establish the target-state identity architecture and effectively communicate and guide engineers to implementing that vision. Develop secure and scalable authentication, authorization, and account provisioning workflows. Partner with engineering teams to integrate identity services into applications and infrastructure using APIs and automation pipelines. Evaluate complex business requirements and effectively guide cross-functional teams to implement secure identi [... source excerpt omitted ...] architecture and security standards. Engage with internal and external stakeholders to communicate strategy, resolve roadblocks, and champion IAM modernization initiatives. Job Requirements: Qualifications: 10+ years of experience in IAM or Security Architecture roles, with demonstrated success in designing enterprise-scale IAM platforms Strong expertise with IAM protocols (SAML, OAuth2, OIDC, SCIM, LDAP, Kerberos, FIDO) and modern cloud identity models Extensive hands-on experience with products like CyberArk, PingOne, Ping Davinci, EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido, and Active Directory Expert-level understanding of Authentication, Authorization, Directory