Ameeruddin Mohammed

Senior IAM/Security Engineer with 10+ years of experience architecting, developing, and supporting enterprise Identity and Access Management solutions across healthcare, financial services, and aviation industries. Hands-on experience with SailPoint IdentityIQ, IdentityNow, and Identity Security Cloud (ISC), including connector development, workflow customization, certification campaigns, and role-based access control (RBAC). 5+ years of hands-on experience with CyberArk (EPV, PVWA, CPM, PSM) for privileged account onboarding, session isolation, credential rotation, and vaulting of service and administrative accounts. Extensive hands-on expertise in Active Directory, Azure AD/Entra ID, Hybrid Identity environments, and enterprise access remediation initiatives.

Proficient in Java, JavaScript, HTML/CSS, SQL/T-SQL, Python, and shell scripting for building custom IAM connectors, automation utilities, and integration middleware. Strong background in LDAP programming using OpenLDAP, JNDI, and directory APIs to integrate identity stores with downstream applications. Extensive experience with SOAP and REST web services for building and consuming identity provisioning and de-provisioning APIs across cloud and on-premises systems.

Hands-on experience with single sign-on and federation technologies including Shibboleth, Duo Security, and OpenID Connect. Skilled in administering and integrating Microsoft Active Directory, Azure AD, Okta, and OneLogin for enterprise identity lifecycle management. Working knowledge of RADIUS and TACACS+ for network authentication and access control implementations.

Comfortable operating in UNIX/Linux environments, writing and maintaining Bash shell scripts for automation, monitoring, and system administration tasks.

Experience with relational and NoSQL database platforms including SQL Server, MySQL, Oracle, and MongoDB for identity data storage, reporting, and reconciliation. Contributor to open-source identity tooling and active participant in regional IAM community discussions and knowledge-sharing forums. Track record of mentoring junior IAM developers and engineers, conducting code reviews, and establishing team coding standards.

Solid understanding of compliance and regulatory frameworks including HIPAA, NIST 800-53, FERPA, and SOX as applied to identity governance and access controls. Proven ability to translate business requirements into scalable, well-architected IAM solutions while balancing security, usability, and delivery timelines. Experienced in 24/7 production support, root-cause analysis, and on-call incident response for mission-critical identity infrastructure.

Adept at cross-functional collaboration with business analysts, application owners, and infrastructure teams to resolve integration and compatibility issues.

Sr. IAM / SailPoint Engineer - Alliant Credit Union - Chicago, IL

(2022-01)

• Led the architectural design and implementation of SailPoint Identity Security Cloud (ISC) across Alliant Credit Union hybrid enterprise environment, migrating legacy SailPoint IdentityIQ (IIQ) workflows to the cloud-native ISC platform, improving provisioning cycle time and enabling centralized identity lifecycle management at scale.
• Served as Technical Lead for Microsoft Entra ID and Azure Active Directory modernization across enterprise Windows Infrastructure.
• Design and build custom SailPoint connectors and rule-based provisioning workflows to integrate core banking, HR, and cloud applications into a centralized identity platform.
• Configure and maintain CyberArk EPV, PVWA, and CPM components to vault, rotate, and monitor privileged and service account credentials across on-premises and Azure environments.
• Develop REST and SOAP-based integrations between SailPoint, ServiceNow, and Active Directory to automate joiner-mover-leaver (JML) processes and reduce manual provisioning tickets.
• Implement and tune access certification campaigns, separation-of-duties (SoD) policies, and role mining initiatives to strengthen RBAC and reduce over-entitlement risk.
• Write and maintain BeanShell, Python, and Bash scripts to automate identity reconciliation, bulk account remediation, and scheduled audit reporting.
• Implemented enterprise SSO/MFA integrations with Okta, SAML, OAuth 2.0, and OIDC for critical applications.
• Implemented CyberArk PAM onboarding processes for privileged users, shared accounts, service accounts, and administrative credentials.
• Partner with the Security and Compliance teams to align IAM controls with SOX and NIST 800-53 requirements, supporting quarterly access review audits.
• Administer Azure AD and on-premises Active Directory group and OU structures supporting application entitlements and single sign-on integrations.
• Configure Duo Security and OpenID Connect-based SSO for internal and vendor-facing applications, reducing help desk password reset volume.
• Lead root-cause analysis and remediation for production identity incidents, providing on-call support for critical provisioning and authentication failures.
• Integrated identity event data from Microsoft Entra ID and Okta into Splunk for centralized SIEM alerting, enabling detection of anomalous sign-in behavior and privilege escalation events.
• Document technical designs, connector specifications, and operational runbooks for SailPoint and CyberArk components used by the broader IAM team.
• Managed SSO and federation integrations using SAML and OAuth protocols for secure enterprise authentication.
• Collaborate with infrastructure and database teams to troubleshoot SQL Server-backed identity data stores supporting SailPoint aggregation and reporting.
• Participate in regional IAM community forums, sharing lessons learned on SailPoint ISC migration and CyberArk privileged access hardening.

Sr. IAM / SailPoint Engineer - Community Health Systems - Houston, TX

(2018-05 - 2021-12)

• Deployed and configured SailPoint IdentityIQ (IIQ) as the core IGA platform for Community Health system enterprise identity program, handling system installation, patch management, onboarding, and connector framework customization for authoritative and target systems.
• Deployed and administered CyberArk privileged access components to secure administrative credentials for EHR, database, and network infrastructure accounts.
• Developed custom LDAP integrations using JNDI and OpenLDAP APIs to synchronize identity data between Active Directory and clinical application directories.
• Built Java and Python-based provisioning connectors to automate account creation, entitlement assignment, and de-provisioning for HIPAA-regulated systems.
• Configured Shibboleth and OpenID Connect single sign-on for clinical and administrative applications, improving authentication consistency for end users.
• Implemented RADIUS-based network authentication for VPN and remote access, coordinating with network engineering on TACACS+ device administration.
• Authored and maintained Bash shell scripts on RHEL servers for scheduled identity reconciliation jobs and log rotation of IAM audit trails.
• Supported HIPAA compliance initiatives by implementing access certification reviews, least-privilege role design, and audit logging for PHI-adjacent systems.
• Diagnosed and resolved system integration issues between SailPoint, Active Directory, and Oracle Identity Manager during a multi-facility identity consolidation project.
• Wrote SQL and T-SQL queries and stored procedures to support identity reporting, reconciliation, and data quality remediation efforts.
• Partnered with business analysts and application owners to translate access requirements into technical specifications for new system onboarding.
• Documented IAM standards, connector configurations, and troubleshooting guides used across the security engineering team.
• Contributed to open-source LDAP and identity tooling projects and evaluated open-source utilities for internal automation use cases.

IAM Security Engineer - United Airlines - Chicago, IL

(2015-01 - 2018-04)

• Supported implementation and administration of SailPoint IdentityIQ for employee and contractor identity lifecycle management across corporate systems.
• Assisted in deploying CyberArk privileged session management for administrative access to network devices and application servers.
• Developed and maintained LDAP integrations using OpenLDAP and Netscape Directory SDK APIs to connect HR systems with Active Directory.
• Wrote Perl and PHP scripts to automate routine account provisioning tasks and generate periodic access reports for application owners.
• Configured and supported Shibboleth-based federated authentication for internal web applications and partner-facing portals.
• Assisted with RADIUS and TACACS+ configuration for network device authentication in coordination with the network operations team.
• Administered Active Directory environments supporting corporate access controls and single sign-on integrations.

Master of Science, Computer Science – International Technological University (ITU), San Jose, CA | 2015

Bachelor of Science, Computer Science – Jawahar Navodaya Vidyalaya (JNV), India | 2012