Identity Ops Engineer

Music is Universal

Its the passionate and dedicated team at Universal Music who help make us the worlds leading music company. From A&R to finance legal to digital sales to marketing Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.

Everyone is welcome to apply for our roles and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender race disability sexual orientation religion belief age marital status background pregnancy or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism dyslexia ADHD and other forms of neurocognitive variation.

We will always seek to make appropriate adjustments to recruitment workplaces and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards including alternatives to the online form or to disclose a neurocognitive condition please email

Job Summary

Job Functions

• Utilize best practices to ensure that solutions protect information resources against unauthorized use inappropriate degrees of access disclosure damage and/or loss.

• Troubleshoots and resolves issues related to identities systems access accounts authentication authorization entitlements and permissions.

• ITIL-based operational support and acts as a technical resource for the Active Directory infrastructure including incident change and problem management.

• Provides support of on premise and cloud-based equipment and configuration including but not limited to Domain Controllers SaaS applications such as Azure Active Directory M365 Duo CyberArk YubiKey Microsoft Identity Management Splunk and Active Roles servers.

• Complete the key metric reporting and analysis for the Identity Management environment as required.

• Work to ensure audit tasks related to Identity Management are completed on time with participation of appropriate parties.

• Participate in security incident response teams as needed.

• Utilize industry best practices for appropriate standards processes procedures tools and documentation.

• Ensure the maintenance patching operating and monitoring of IAM systems is in place and completed on schedule.

• Participate in on-call rotation and as such work outside of standard business hours will occasionally be required.

• Participate in developing automation to reduce the time spent on routine tasks.

• This position will be shift-based.

Job Requirements

Essential:

• Solid technical skills in the Identity Management space including Active Directory and Entra ID.

• Minimum of five years directly related experience in Identity & Access Management (IAM).

• A strong ability for troubleshooting and problem analysis is required along with the ability to clearly communicate the results of problem analysis to business stakeholders IT support teams and network providers to quickly and effectively resolve operational issues.

• Experience troubleshooting and solving issues related to identities systems access accounts authentication authorization entitlements and permissions.

• Hands on experience of Active Directory operation and support including Active Directory Infrastructure components (FSMO roles) delegated administration group policies OU admin & Site replication ADFS Exchange operation and support including OWA SMTP services and routing / costing.

• Customer service driven/focused with a proactive and positive can-do approach. Demonstrates commitment to organizations policy framework and practices continuous improvement.

• Hands-on experience and skills with systems such as M365 and ServiceNow are required. Experience with ServiceNow orchestration into Active Directory M365 Zoom Slack Box or Teams is a plus.

• Demonstrated current work experience supporting integrated IAM solutions such as Entra ID Active Roles Duo PKI and CyberArk.

• Demonstrated organizational skills attention to detail and ability to work both independently and as part of a team.

• Solid written oral and interpersonal communications skills.

• Knowledge of Systems Reliability Engineering principles automation and AI

Desirable:

• Bachelors Degree in Computer Science or Engineering closely related field or comparable education and experience.

• Understanding of Microsoft Teams group/system policies survivable branch appliances unified messaging and federation

• Experience configuring and managing IT systems with technologies such as Java JavaScript XML SOAP JSON/REST SQL RDBMS Linux Windows and databases

• IT Certifications including MCSE Certification specialization in Identity Management Certified Access Management Specialist (CAMS) and ITIL Foundations certifications desired

• International experience beneficial; multiple language skills a plus

Just So You Know

The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However the business operates in an environment that demands change and the jobholders specific responsibilities and activities will vary and develop. Therefore the job description should be seen as indicative and not as a permanent definitive and exhaustive statement.

Job Category: