Identity and Access Management (IAM) Architect with 20 years of comprehensive experience in design, architecture, development and administration of Identity and Access Management (IAM) systems.
Experience
2016 — Now
2016 — Now
Pleasanton, CA
• Shape and execute forward-thinking enterprise IAM vision and strategy, aligning with broader cybersecurity, business objectives and positive end-user experience.
• Lead the deployment and lifecycle management of IAM platforms and services, including SSO, MFA, PAM, IGA, and directory services.
• Mentor and lead a team of IAM engineers and analysts, while managing vendor relationships and contract negotiations.
• Lead and create project initiatives and strategy for On Premise and multiple Cloud IAM (Azure, Google Cloud and Oracle Cloud)
• Establish and enforce IAM governance, including access reviews, RBAC, policy frameworks, and regulatory compliance (SOX and PCI)
• Secure and harden the environment using features such as zero trust, risk based authentication, conditional access, MFA and identity protection.
• Collaborate closely with project teams to identify key IAM technical requirements, prioritize requirements, catalog requirements, and assign them to project use cases and sprints.
• Perform Azure Identity Governance using RBAC, PIM, Access Package, Certifications, Conditional Access and Identity Protection
• Secrets Management using Azure Key Vault, Hashicorp Vault and Thycotic Secret Server
• Provide IAM solutions to meet least privileged access, Just in Time access and time bound access
• Regularly report to the CISO, CTO, and other senior leadership on the status of IAM initiatives, including progress on key projects, risks, and opportunities.
• Develop and present executive-level reports, dashboards, and metrics that demonstrate the effectiveness and value of IAM strategies and investments.
• Drive the automation of IAM processes to reduce manual effort and empower end-users with self-service capabilities.
• Oversee IAM risk assessments, audits, and incident response, ensuring alignment with internal controls and external standards.
2010 — 2016
Universal City, Los Angeles, CA-91604
• Serve as primary interface with business users and stakeholders for understanding the business processes, workflows and requirements gathering for Identity and Access Management
• Analyze requirements and Architect solutions, workflow processes and prepare technical design document
• Assist in preparing road map for Identity and Access Management
• Manage project plan and assign tasks to team
• Manage support and development team at onsite and offshore
• Monitor the implementation of the project
• Develop code using programming language as Java, J2EE, XML, HTML and Xpress and tools such as Sailpoint IdentityIQ, Sun Identity Manager (Oracle Wavest), CA IdentityMinder, LDAP and Microsoft Active Directory
• Design and develop REST Web Services(IDaaS) for Identity Management functions using SCIM
• Design and develop Identity Warehouse (IDW) using java.
• Provide solutions and processes to reduce security gaps in Identity management processes
• Perform code review, design and test plan of team members
• Develop custom connectors to provision into cloud applications like Dropbox and Air Watch
• Integrate SPML, SOAP based applications, SAP, AS400, RACF, Oracle Database, Exchange into IdM for provisioning and deprovisioning
• Facilitate user acceptance testing with different application owners and obtain sign off
• Provide and execute innovation ideas to reduce effort and cost
• Responsible for Identity Management products assessment and selection
• Design develop self service Password Sync and reverse password sync between IDM, AD and SSO
• Migrate processes from Oracle Waveset to new IDM Systems
2010 — 2016
2010 — 2010
2010 — 2010
Client: GE Plastics
Tools/Programming Language: Sun Identity Manager, Active Directory, Java, Oracle, JSP, LDAP
Responsibilities:
• Monitor and manage tickets queue raised by end users
• Work on tickets within the end time mentioned in the ticket
• Perform daily production tasks and handle server outages
• Provide support to end users and application team owners
• Discuss requirements different application owners for integrating new applications into IdM
• Requirements analysis and design and coordinate with offshore
• Prepare broad level design for Identity management system
• Design system architecture
• Perform code review of the code provided by offshore team
• Perform system and integration testing
• Deploy bug fix and enhancement to Production
2008 — 2009
2008 — 2009
Englewood Cliffs, New Jersey
Client: NBCUniversal
Tools/Programming Language: Sun Identity Manager, Active Directory, Java, Oracle, JSP, MS-SQL Server, JBOSS
Responsibilities:
• Perform requirements analysis from the details provided by the application team
• Design and develop a common provisioning process framework.
• Prepare high level design document, test plans and architecture for application integration into Identity Manager
• Explain requirements to the offshore team and review the deliverable sent by the offshore team
• Perform Identity Manager upgrade by coordinating with different teams
• Perform user acceptance testing for the provisioning workflow with end users and application team owners and get their feedback
• Implement the feedback and comments into the provisioning process framework and get sign off from end users and application team owners
Education
Berhampur University