• Led the architecture, design, and implementation of SailPoint IIQ and Identity Security Cloud (ISC) solutions, focusing on User Access Management (UAM), compliance, and audit-ready operations.
• Developed and implemented end-to-end identity lifecycle processes, including automated onboarding, provisioning, and offboarding, enforcing RBAC/least-privilege models.
• Optimized governance workflows and ensured alignment with security policies and regulatory standards.
• Collaborated with application owners and architects to define secure access models, leading RBAC and access certification processes.
• Customized user onboarding, modification, and offboarding activities, ensuring accurate and timely access provisioning and de-provisioning.
• Implemented automated workflows for privileged role and entitlement provisioning within SailPoint IIQ for a major banking environment, covering local and domain privileged access.
• Designed and delivered customized SailPoint IIQ workflow enhancements, eliminating manual work-item creation for application and CyberArk teams, supporting DORA-aligned operational and compliance requirements.
• Performed access provisioning, role assignments, and entitlement changes following least-privilege and segregation-of-duties principles.
• Provided audit support by preparing access evidence, operational logs, and compliance documentation.
• Investigated and resolved complex SailPoint IAM-related issues, escalating to L3, Tech Leads, customers, or vendor teams as required.
• Provided extensional support for IAM services, handling enhancements in UI Customization, Service Requests, Changes, and Problem tickets within SLA using ITSM tools such as ServiceNow.
• Implemented and supported SailPoint IIQ solutions upgradation across enterprise IAM environments.
• Developed IAM integrations using JavaScript, Bean Shell, XML, and SQL, enhancing operational efficiency and compliance.
• Maintained strong documentation discipline, ensuring audit-ready records and clear operational traceability.

Worked in collaboration with cross-functional teams, including Engineering, Security, and Compliance, to optimize GCP and Azure IAM implementations, thereby ensuring the successful delivery of projects.

• Collaborated with cross-functional teams (Engineering, Security, Compliance) to optimize GCP IAM, and Azure IAM implementations, ensuring successful project delivery.
• Architected and optimized Azure AD & GCP IAM controls for multiple business units, reducing manual service-account key usage by 70% through Workload Identity Federation.
• Automated creation and lifecycle management of GCP service accounts via Terraform, standardizing processes across projects.
• Streamlined Azure PIM workflows and implemented Just-In-Time access for privileged roles, cutting privileged access approval time by 60%.
• Authored and maintained comprehensive cloud IAM design documents and runbooks to ensure cross-team knowledge transfer.
• Remediated all GCP and Azure IAM audit findings within SLA, strengthening compliance posture and eliminating repeat findings.

• Led the migration of an enterprise Identity and Access Management (IAM) solution, encompassing requirements gathering, design feasibility assessment, and process standardization to enhance efficiency.
• Designed and implemented NERM onboarding and lifecycle governance for contractors, vendors, and third-party workforce across multiple financial institutions.
• Conducted functional and technical design analysis to assess migration feasibility for SailPoint IIQ/ISC and One Identity Manager, identifying gaps, risks, and optimization opportunities.
• Supported and aligned One Identity Manager configurations for identity lifecycle, role modelling, and access governance to ensure consistency with the target IAM architecture.
• Led SailPoint ISC/IIQ migration: assessed existing IIQ workflows, defined target-state processes, and onboarded 25 enterprise applications.
• Established role-mining exercises and SoD controls within SailPoint ISC/IIQ, reducing policy violations by 85%.

• Collected onboarding requirements from global business services and evaluated the functional and technical design for Access Management.
• Performed an in-depth analysis of the functional and technical design for the Access Management workstream, including reviewing existing systems and processes, identifying areas for improvement, and proposing solutions to enhance efficiency and security.
• Collaborated closely with the Chief Information Security Officer (CISO) team to review Business Impact Analysis (BIA) and Security Concepts.

• I have implemented IIQ using SSB in various environments.
• Integrated multiple applications with SailPoint IIQ lifecycle events and developed Joiner, Mover, and Leaver workflows to manage user lifecycle in the enterprise based on client requirements.
• This improves compliance, reduces risk, and enhances security. 
• I have also created end-to-end project documentation that covers requirement gathering, installation, code deployment, and technical design documents.

• Efficiently integrated PDM/HR and Identity Mappings using multiple codes and formulated distinctive Life Cycle States for white and blue collars. 
• Created a dynamic PowerShell rule for automatic exchange mailbox creation after AD account setup: 
  • ?Integrated Learning Management, SSO, and role-based Provisioning for Zoom access.

• Led the migration of IAM solutions and, as a consultant, gathered requirements from the business while providing best practice advice and recommendations for IAM implementation.
• Implemented SailPoint IDN/ISC integration with Active Directory, HR-MS, SSO, and Zoom, automating 95% of user onboarding tasks.
• Developed custom connectors and workflows in IIQ, and defined CyberArk PAM integration for privilege elevation.
• Provided design specifications for IIQ-PAM (CyberArk) integrations, including customized workflows and quick links for the creation of Personal Privileged Accounts.
• Configured CyberArk to monitor live privileged sessions, enabling responsible individuals to take appropriate actions.
• Managed PDM/HR identity mapping and lifecycle state models, ensuring seamless joiner-mover-leaver processes across Azure environment.

• Provide design specifications for IIQ-PAM (CyberArk) integrations, workflow customization, and quick links for secure creation and lifecycle management.
• Must have experience configuring CyberArk.

• Managed the Operations team for the IAM implementation process and streamlined processes, supporting the development of enhancements.
• Gathered requirements, analysed, prepared functional designs, tested, and provided hyper-care support.
• Implemented and supported an identity management solution encompassing life cycle management, access entitlement provisioning, and governance.
• Developed customized rules and reports to enhance efficiency and reduce manual intervention on SailPoint IIQ for a major German FMCG company.

• Led and managed the offshore ERP integration team to deliver optimal IAM development solutions for business applications.
• Executed the technical implementation of Identity and Access Management (IAM) for ERP applications, transitioning from SUN IDM to the SailPoint Production Environment.
• Developed rule-based functionalities for ERP integration and customization reports within a large Fortune 100 company in the USA, as part of their corporate Identity Management (IDM) program.