Emran Hossain

IAM Engineer with 6+ years of experience in SailPoint IdentityIQ and Identity Security Cloud, currently the platform SME at ISO New England. Onboarded 30+ applications and automated joiner-mover-leaver processes for 10,000+ identities, cutting manual provisioning by 30–40% and access turnaround from 1+ day to a few hours. Strong in RBAC, SoD, access certifications, and non-human identity management across SOX, HIPAA, GDPR, NIST, and ISO 27001 environments.

IAM Engineer - ISO New England

(2025-06)

• Deployed SailPoint Identity Security Cloud across 30+ cloud and on-premises applications using eight connector types, giving one access layer and faster application onboarding.
• Automated joiner-mover-leaver for 10,000+ identities, cutting manual provisioning by 30–40% and access turnaround from 1+ day to a few hours.
• Built custom workflows, transforms, rules, and lifecycle events in SailPoint Identity Security Cloud to support identity synchronization, access requests, entitlement management, and certification remediation, improving consistency across identity processes
• Integrated SailPoint Identity Security Cloud with Workday, SuccessFactors, Okta, ServiceNow, Microsoft Entra ID, Salesforce, CyberArk, and Active Directory to centralize identity data and support consistent access management
• Configured access certifications, segregation of duties (SoD) policies, automated violation handling, and remediation processes to meet SOX, NIST, and ISO 27001 audit requirements.
• Implemented non-human identity management in IdentityIQ for service accounts, API identities, bots, and machine identities, with ownership assignment, lifecycle rules, and recurring access reviews to reduce orphaned-account risk.
• Enabled AI features in ISC (access recommendations, risk scoring, anomaly detection, certification assistance) that shortened reviewer decision time on certification campaigns.
• Automated provisioning, entitlement reconciliation, and access governance reporting through IdentityIQ REST APIs; built dashboards that give security and audit teams live visibility into orphaned accounts, privileged access, and certification status.
• Serve as platform SME for production support, connector troubleshooting and performance tuning, maintaining 99% availability and resolving issues within SLA.

SailPoint Developer - Optiv

(2024-01 - 2025-06)

• Customized SailPoint IdentityIQ for client environments by developing provisioning workflows, lifecycle events, BeanShell rules, QuickLinks, forms, and multi-level approval processes to support consistent identity management.
• Integrated IdentityIQ with Active Directory, Entra ID, Okta, LDAP, JDBC, REST APIs, web services, and SCIM connectors to automate identity lifecycle processes across hybrid environments.
• Configured Okta Universal Directory, SSO, MFA and Lifecycle Management to automate joiner-mover-leaver and strengthen authentication.
• Designed RBAC models for business and IT roles, incorporating entitlement management, access certifications, segregation of duties (SoD) policies, and least-privilege controls across enterprise applications.
• Built BeanShell rules, provisioning policies, email templates, and REST API integrations to automate access requests and approval workflows.
• Handled application onboarding through connector configuration, schema mapping, aggregation, and identity correlation.
• Automated recurring IAM operations with Java, BeanShell, JavaScript, Python and shell scripts.

IAM Engineer - Baxter Health

(2022-11 - 2023-12)

• Designed and delivered IdentityIQ solutions, customizing Manage Access and Manage Identity modules to meet business requirements.
• Developed Lifecycle Manager workflows, lifecycle and certification events, email templates and task definitions that cut manual approval steps.
• Configured authoritative and non-authoritative sources, including Active Directory, flat files, JDBC, and LDAP, to build and maintain accurate identity cubes for identity governance
• Implemented access certification, automated provisioning, MFA, and password management across enterprise applications, strengthening access controls and improving account administration
• Rewrote legacy provisioning workflows into a redesigned model, removing recurring failure points and reducing provisioning errors.
• Led root-cause analysis of IAM incidents using IdentityIQ logs and SAML 2.0 tracing, and improved monitoring to reduce repeat incidents.
• Wrote MySQL and PL/SQL procedures and queries for identity data operations and reporting, using JDBC connections to Oracle to support reliable access to identity data
• Added new applications to the automated entitlement review workflow and kept configuration, design and code-review documentation current for audits.

IAM Administrator - Speedway Petroleum

(2020-04 - 2022-10)

• Installed and deployed SailPoint IdentityIQ and migrated applications from legacy IAM systems to cloud-based solutions.
• Deployed out-of-the-box JDBC, LDAP, and Active Directory connectors and built custom Java connectors using SOAP, REST, and vendor APIs when no standard connector existed, enabling application integration with SailPoint IdentityIQ
• Onboarded and offboarded complex applications by supporting application teams through requirements gathering, configuration, and testing, improving the accuracy and consistency of application access changes
• Enabled browser and mobile self-service password management, reducing password-related help desk tickets.
• Resolved IAM incidents and service requests involving provisioning, deprovisioning, and access changes, and escalated product defects to vendor support to restore user access and maintain reliable identity services

Bachelor of Science - Computer Science - Youngstown State University