Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 242 days ago

Identity Access Management (IAM) Engineer – CyberArk & PKI

umusic36 open roles

Where
Sydney, New South Wales
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity Access Management (IAM) Engineer – CyberArk & PKIumusic · Sydney, New South Wales

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on umusic's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. umusic postings stay open a median of 13 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 242 days ago

umusic median: 13 days open

The posting

Job Summary

We are currently seeking an Identity & Access Management Engineer with specialization in CyberArk and Public Key Infrastructure (PKI) to join UMG’s global Tech Security & Identity organization. Reporting to the Manager, PAM & PKI this is a hands-on engineering role responsible for designing, implementing, and operating enterprise-grade privileged access and certificate-based security capabilities across a global, hybrid environment.

This engineer will play a critical role in securing privileged user access, service accounts, application credentials, and machine identities through CyberArk, while also engineering and operating global PKI services that secure and establish trust across infrastructure, applications, automated workloads, and all of UMG’s public facing websites. The role emphasizes deep technical execution, automation, and operational excellence, partnering closely with infrastructure, security, and application teams to reduce risk and strengthen identity security at scale.

Job Functions

Design, engineer, deploy, and operate Privileged Access Management solutions using CyberArk, 1Password, Hashicorp Vault, and other privileged tooling across the enterprise.

Administer and enhance CyberArk components including Vault, CPM, PVWA, PSM, and related integrations.

Implement and manage privileged access controls for users, service accounts, application credentials, and non-human identities.

Engineer and operate enterprise PKI services, including certificate issuance, renewal, revocation, and lifecycle management.

Administer and enhance PKI platforms such as Microsoft AD Certificate Services (ADCS), DigiCert, and Keyfactor certificate lifecycle management tooling.

Manage and support public and private certificates used for infrastructure, applications, and secure service-to-service communication.

Integrate CyberArk and PKI capabilities into applications, platforms, and cloud environments to enable secure privileged and machine-based access.

Develop and maintain automation for CyberArk and PKI workflows using scripting and API-based integrations (e.g., PowerShell, Python).

Partner with infrastructure, cloud, and application teams to onboard systems into CyberArk and PKI services and remediate security gaps.

Troubleshoot and resolve complex CyberArk- and PKI-related issues, including credential failures, certificate outages, and access disruptions.

Ensure PAM and PKI services meet availability, resiliency, and operational performance requirements in a global environment.

Support audit, compliance, and security review activities related to privileged access and cryptographic controls.

Maintain technical documentation, configuration standards, and operational runbooks to support scalable operations.

Continuously improve privileged access and PKI maturity through automation, platform enhancements, and process optimization.

Job Requirements

Essential Qualifications

5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with strong focus on CyberArk and PKI.

Demonstrated enterprise experience implementing and operating CyberArk PAM solutions.

Strong hands-on experience with PKI concepts and technologies, including certificate lifecycle management, trust models, and cryptographic standards.

Experience administering Microsoft AD Certificate Services (ADCS) and managing public SSL/TLS certificates.

Solid understanding of privileged access concepts including credential vaulting, session management, and least privilege.

Proficiency in scripting and automation using tools such as PowerShell or Python.

Experience integrating CyberArk and PKI solutions with Active Directory, cloud platforms (Azure and/or AWS), and enterprise applications.

Ability to independently own complex technical implementations while collaborating across a global organization.

Strong troubleshooting, documentation, and communication skills.

Desirable Qualifications

Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical discipline.

CyberArk certifications such as CyberArk Defender or equivalent.

Experience with certificate management platforms such as Keyfactor or Venafi.

Experience integrating PAM or PKI into CI/CD pipelines, DevOps workflows, or secrets management solutions.

Familiarity with security and compliance frameworks such as SOX, ISO 27001, or NIST.

Experience operating IAM or security platforms within a large, global, or highly regulated enterprise

Universal Music Group is an Equal Opportunity Employer.

Diversity & Inclusion

At Universal Music we are committed to fostering diversity and inclusivity as an equal opportunity employer. We encourage applicants from all backgrounds to apply for our roles regardless of their gender, race, ethnicity, nationality, age, sexual orientation, gender identity, intersex status, marital or family status, neurodiversity, religion or belief, disabilities, or socio-economic background. We also encourage people from all cultural backgrounds to apply, including First Nations people. It is through our diversity and inclusivity that we bring together different perspectives, enhancing our creative and evolving workplace. Music is Universal.

Disclaimer

The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive and exhaustive statement.

Job Category:

Technology

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against umusic's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on umusic's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    umusic's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.