Pavan Kumar Mandalapu

IAM practitioner with 7+ years in enterprise IT, most recently building out a SailPoint Identity Security Cloud (ISC) multi-region tenant end-to-end - Workday-driven Joiner-Mover-Leaver automation, RBAC/ABAC role design, Segregation of Duties enforcement, and access certification campaigns.

The QA background shows up directly in that work: connector testing, aggregation validation, and compliance reporting come from the same instinct for catching what's broken before it ships. Before ISC, spent 3+ years on device identity at SOTI, securing 10,000+ Apple endpoints through Microsoft Entra ID, certificate-based authentication, and Conditional Access.

IAM Analyst (SailPoint ISC) — Identity Governance & Access Management at SOTI Inc. (2024-04 – Present)

• Manual provisioning effort dropped roughly 40% once Joiner-Mover-Leaver automation went live on Workday HR events, closing orphaned access across 4,000+ identities.
• Onboarded 7 enterprise sources across 4 connector types - AD, JDBC, Web Services, Flat File — plus Okta and Entra ID, designing the schemas and writing the runbooks the team still uses.
• Role mining across all 4,000 identities cleared out entitlement sprawl and fed into RBAC/ABAC modeling, with access assigned dynamically by department, location, and job attributes.
• Built the SoD policies - detection, escalation, automated revocation - behind 3 quarterly SOX/HIPAA certification campaigns covering that same population.
• Brought 20,000+ service accounts under risk-tiered non-human identity governance, aligned to PIPEDA and OSFI B-13.
• Deployed and ran the Virtual Appliance cluster on Linux, validated failover, and wrote the SOPs that cut incident response time.
• When aggregation, correlation, or provisioning issues surfaced, traced them through ISC Search and CCG/VA logs and fixed the root cause at the schema or rule level.
• Built layered SailPoint Transforms (First Valid, Static, Lookup, Concatenation) and wrote BeanShell and cloud connector rules for attribute normalization, multi-source correlation, and custom provisioning logic.
• Built out the access request layer as well - multi-level workflows with Governance Group approvals, custom forms, and ServiceNow routing.
• Net effect: identity management moved from manual, ticket-driven requests to an automated, audit-ready program spanning 4,000 workforce identities and 20,000 service accounts (Service and AI Agents).

Senior QA Engineer — Device Management at SOTI Inc. (2021-04 – 2024-03)

• Validated Apple ADE/DEP, Apple Business Manager, VPP, and User Enrollment across 10,000+ endpoints, testing iOS and macOS enrollment, compliance, and security policies.
• Verified device authentication end-to-end with SCEP and PKCS certificates alongside Conditional Access, and validated APNs certificate handling for MDM command delivery.
• Owned provisioning quality across 1,000+ Zero Touch (ADE/DEP) devices — auto-enrollment, identity binding, policy application, no manual steps.
• Tested Microsoft Entra ID integrations and Conditional Access enforcement, plus OAuth 2.0 and SAML SSO flows in the MDM context.
• Diagnosed cross-layer issues across device, backend, and Entra ID/Intune logs, keeping device and policy data in sync through SQL and NoSQL checks.
• Led beta and proof-of-concept validation for new security features — Entra ID join flows, shared devices, certificate-based identity binding — aligned to Zero Trust principles.
• Tested automated provisioning pipelines that mirror IAM JML Joiner flows: enrollment, identity binding, and automatic policy application on first boot.
• Authored the test strategy and QA sign-off process for multi-platform MDM releases across iOS, macOS, and tvOS.

QA Analyst — ETL Testing & Data Visualization at Presidio (2018-09 – 2021-03)

Business Objects → Tableau BI modernization

• Owned UAT sign-off and the full defect lifecycle in HP ALM for a large-scale Business Objects → Tableau migration, driving a zero-regression cutover.
• Wrote the custom SQL and ran query tuning plus performance and load testing through JMeter and HP Performance Center to validate dashboard accuracy across data sources.

Bachelor's Degree – Osmania University