John Y

Senior IAM Consultant with 8+ years of IT experience, including 7+ years in Identity & Access Management (IAM). Specialized in Okta (OIE, OAG) and Microsoft Entra ID, delivering secure and scalable identity solutions across hybrid (cloud + on-prem) environments. Acted as escalation point for complex IAM issues and outages, performing root cause analysis (RCA) and implementing preventive measures.

Proven expertise in SSO integrations (SAML, OAuth 2.0, and OIDC), Conditional Access policies, and Zero Trust architecture. Skilled in automation using Okta APIs, PowerShell, and leading production deployments, upgrades, and platform enhancements, while mentoring L2 support teams.

Senior IAM Consultant at Arcova (formerly MorganFranklin Consulting) (2023-10 – Present)

Client: Otis (Global Engineering Enterprise)

• Implemented Okta Identity Engine (OIE) for workforce identity and authentication modernization.
• Configured Okta Access Gateway (OAG) to enable secure SSO for on-premise legacy applications.
• Integrated Active Directory with Okta for hybrid identity architecture.
• Enabled Zero Trust access to on-prem applications without VPN using OAG.
• Designed OAuth 2.0 / OIDC flows for modern and API-driven applications.

Senior IAM Consultant at Arcova (formerly MorganFranklin Consulting) (2023-10 – Present)

Client: Sylvamo (Global Manufacturing Enterprise)

• Managed and optimized Microsoft Entra ID environment.
• Administered on-prem Active Directory and ensured seamless synchronization with cloud identity.
• Implemented SSO, MFA, and access policies across enterprise applications.
• Supported identity lifecycle management and hybrid identity integrations.

Senior Security Analyst (IAM) at Stefanini (2021-09 – 2023-10)

Client: Lockton (Global Insurance Firm)

• Managed Active Directory and Microsoft Entra ID environments.
• Implemented SSO and MFA solutions for enterprise applications.
• Enforced RBAC and least privilege access policies.

Senior Security Analyst (IAM) at Stefanini (2021-09 – 2023-10)

Client: Adtalem Global Education

• Implemented Okta Identity Engine (OIE) for authentication and access management.
• Integrated Entra ID with Okta for hybrid identity use cases.
• Configured SSO, MFA, and federation protocols (SAML/OIDC).
• Improved authentication security posture through adaptive access policies.

Security Analyst (IAM) at Tata Consultancy Services (TCS) (2016-10 – 2021-07)

• Configured and managed Okta SSO integrations and Active Directory synchronization.
• Implemented MFA policies for critical applications and privileged users.
• Monitored authentication logs and suspicious login activities.
• Supported IAM incident response and compliance reporting.

B.Tech – Jawaharlal Nehru Technological University (2015)