CyberArk and Public Key Infrastructure

Job Summary We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world. We are currently seeking a CyberArk / PKI Manager to lead and evolve our Identity & Access Management function within the Infrastructure and Operations team. The CyberArk / PKI Manager will drive the execution of our identity strategy, lead a global team of engineers, and deliver innovative solutions across identity security platforms. This individual will play a key role in leading CyberArk / PKI related projects, enhancing operational efficiency through automation and AI, and ensuring compliance with regulatory and internal security policies. The ideal candidate will bring a deep technical understanding of CyberArk / PKI technologies and protocols, combined with strong leadership, planning, and communication skills. Job Functions Lead a global team of engineers and analysts, setting clear priorities, mentoring staff, and ensuring successful delivery of CyberArk / PKI services. Drive the overall strategy and roadmap in alignment with organizational goals and security best practices. Oversee implementation and operations of PKI tools including Keyfactor. Provide guidance to key stakeholders on PKI lifecycle, processes, and procedures. Champion automation and AI integration into CyberArk / PKI processes to improve scalability, risk mitigation, and operational agility. Develop policies and procedures to ensure secure, compliant, and consistent identity lifecycle management across the enterprise. Collaborate with cross-functional stakeholders including Security, HR, and Application teams. Maintain high levels of service performance, monitoring, and SLA adherence, including audit readiness for regulatory frameworks like SOX and GDPR. Track and report key performance metrics, maturity assessments, and strategic initiatives. Provide guidance for incident response and risk remediation related to CyberArk / PKI systems and services. Job Requirements Qualifications Minimum of 5-7 years directly related experience in CyberArk toolset, including Vault, CPM, PVWA, PSM, and PTA Subject matter expertise for certificates and implementation & operation of PKI, with 5+ years of hands‑on use in a global enterprise Experience with implementation / administration of Microsoft AD Certificate Services (ADCS) Experience managing PKI for end‑user devices via MDM (Microsoft Intune, Jamf, etc.) Experience implementing certificate management solutions such as Keyfactor Command, Venafi Trust Protection Platform Experience with administration of public SSL / TLS certificates (DigiCert, Entrust, etc.) Experience in Privileged Account Management with CyberArk PIM Administration Extensive experience in implementation and integration of CyberArk's Privileged Identity Management (PIM) Suite Advanced experience with script development (PowerShell / Python preferred) Experience with PAM tasks – Defining Access Control, User Entitlements, Manage Applications Credentials, User Access Policy Management. Strong leadership, planning, communication, and conflict resolution skills Experience driving automation and / or AI integrations into identity workflows Desirable Bachelor’s or Master’s Degree in Computer Science, Information Security, or a related field Professional certifications such as : CISSP, CISM, Microsoft Certified : Identity and Access Administrator, CyberArk Defender Experience leading IAM functions in a global media, entertainment, or high‑growth company Diversity & Inclusion At Universal Music we are committed to fostering diversity and inclusivity as an equal opportunity employer. We encourage applicants from all backgrounds to apply for our roles regardless of their gender, race, ethnicity, nationality, age, sexual orientation, gender identity, intersex status, marital or family status, neurodiversity, religion or belief, disabilities, or socio-economic background. We also encourage people from all cultural backgrounds to apply, including First Nations people. It is through our diversity and inclusivity that we bring together different perspectives, enhancing our creative and evolving workplace. Music is Universal. Disclaimer The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive and exhaustive statement. Job Category: Technology #J-18808-Ljbffr