Mohan Kumar

IAM professional with 14 years of experience designing, implementing, and supporting enterprise Identity & Access Management solutions. Specialized in SailPoint IdentityIQ (IIQ) and SailPoint Identity Security Cloud (ISC) for identity governance, role-based provisioning (RBAC), access certifications, custom workflows, lifecycle management (joiner/mover/leaver), and rule development. Extensive background in Microsoft Entra ID, IBM Tivoli (ITIM, TAM), CA SiteMinder, CA IdentityMinder, and Layer 7 Gateway, backed by enterprise application development experience in Java/J2EE across requirements analysis, prototyping, design, development, testing, debugging, and performance tuning.

Proven expertise in SailPoint version upgrades, application onboarding through LDAP, JDBC, delimited file, and web service connectors, and user access recertification, entitlement reviews, and data owner recertification. Configured federated single sign-on (SAML 2.0) for more than 100 SaaS providers, including Microsoft Office 365, Microsoft CRM On Demand, Google, NetSuite, Citrix, and WebEx, with hands-on experience in XML signing and encryption based on the OASIS standard. Experienced in creating LDAP User Stores and Policy Stores for CA Policy Server, building solutions that manage the identity lifecycle across enterprise applications, and deploying IAM on AWS and Azure.

Skilled in Java, Python, and BeanShell scripting, REST/SOAP web services, and web technologies (HTML, CSS, JavaScript, XML). Completed a self-study Data Science boot camp (Machine Learning, Deep Learning).

IAM Architect - Mizuho USA - California

(2025-09)

Architecture IAM System, including authentication, authorization, and automated entitlement reconciliation and provisioning workflows, while partnering with Technology, Risk, and Audit stakeholders on control remediation, audit readiness, and regulatory inquiries.

• Designed and implemented scalable IAM solutions using SailPoint IIQ and Saviynt to centralize identity governance and enforce least-privilege access.
• Drove Identity Governance and Administration (IGA) programs end to end, from requirements and design through implementation, enhancements, and operational handover.
• Designed and rolled out Role-Based Access Control (RBAC) models, including role mining, role engineering, and entitlement rationalization to enforce least privilege.
• Owned access lifecycle management, including request, approval, provisioning, recertification, and revocation workflows.
• Configured SAML single sign-on through Okta for IIQ, with SAML correlation to identities. Documented a fallback to pass-through authentication against Active Directory if Okta is unavailable, so administrators keep access.
• Authored the Joiner, Mover, Leaver, Rehire, Leave of Absence and Return from Leave of Absence process specifications. Each is driven by SAP HCM action codes and runs through aggregation, identity refresh and workflow.
• Built duplicate-identity matching into the Joiner process (name, employee group and last-4 SSN), with suspected duplicates routed to an HR-IT work group for review. Added rules for unique user IDs and email IDs that are never reused and keep an archive of old values.
• Deployed and governed Multi-Factor Authentication (MFA) and adaptive/conditional access policies to strengthen authentication and support Zero Trust principles.
• Led application onboarding and integration into IAM platforms using connectors, APIs, SCIM, and custom integrations for both on-prem and cloud applications.
• Designed the CyberArk safe integration for SailPoint. Set up certificate management for LDAP/AD (java keystore import, renewal through Remedy and the middleware team) and service account renewal and certification.
• Wrote the production runbook covering start and stop procedures, health checks, connector debugging, aggregation failure recovery, IQService crash recovery and targeted identity refresh. The Level 1 and Level 2 support teams use it for troubleshooting.
• Integrated IAM platforms with Active Directory, Azure AD/Microsoft Entra ID, and LDAP directories to establish authoritative identity sources and consistent access control.
• Partnered with business stakeholders, security teams, and application owners to define IAM requirements, priorities, and multi-phase roadmaps.
• Set up monitoring with BMC Patrol, Splunk, Oracle OEM and scheduled database-availability scripts. Added workflow failure alerts to the IAM Ops team and application owners, plus configurable log levels and custom audit events for every lifecycle process.
• Designed hybrid identity architectures, including directory synchronization, identity federation, and cloud identity governance across on-prem and multi-cloud environments.
• Standardized builds on the SailPoint Services Standard Build with Ant and a GitHub repository with branches per environment. Classified IIQ artifacts as always-managed, conditionally-managed, configuration or non-managed so enhancements are promoted consistently.
• Conducted architecture reviews and provided guidance on IAM best practices, standards, and reference architectures, ensuring design consistency and risk reduction.
• Conducted control assessments and reviews of IAM processes to ensure compliance with firm-wide policies and regulatory requirements.
• Collaborated with business and IT stakeholders to define detailed IAM requirements and design scalable, compliant solutions.
• Maintained documentation of client requirements, solution designs, and implementation processes for audit readiness and future reference.
• Analyzed, cleansed, and standardized large data sets, including access entitlements, using advanced Microsoft Excel capabilities and data validation techniques.

IAM Engineer / Lead - Southern California Edison - Los Angeles, CA

(2024-08 - 2025-08)

Supported user lifecycle, account lifecycle management, and single sign-on for internal and external users of a California utility, strengthening access controls to mitigate internal fraud risk and reduce the cost and effort of entitlement recertification.

• Designed the user onboarding process for highly secure electric grid applications.
• Configured and developed plan initializer rules using Integration Config to raise tickets in Remedy.
• Configured and developed provisioning rules for connectors such as JDBC, and rules for disconnected, file-based applications.
• Created a rule library for routine operations such as user and account verification and workflow triggers.
• Created entitlements, custom forms, groups, and workgroups to meet client requirements.
• Developed custom tasks for account aggregation, group aggregation, and identity refresh.
• Streamlined identity mapping using SailPoint Rapid Setup for automated attribute correlation and target system synchronization.
• Managed Microsoft Entra ID (formerly Azure AD) access permissions and security policies across cloud and on-premises resources, including groups and memberships, RBAC, and PIM for temporary elevated access.
• Managed the user lifecycle in Entra ID, including creating, modifying, enabling, and disabling accounts as users joined, moved, or left the organization.
• Created and managed Entra ID groups to simplify user access permissions, and managed guest users from other organizations and their access permissions.
• Strengthened identity governance and compliance by deploying Entra ID security baselines, automating configuration audits, and resolving critical vulnerabilities, successfully ensuring continuous regulatory alignment for SOX, GDPR, and HIPAA frameworks.
• Configured SailPoint IdentityIQ for complete user lifecycle management (joiner, mover, leaver), access reviews, and policy enforcement, and customized the Joiner, Mover, and Leaver workflows.
• Developed and customized application connectors (e.g., JDBC, AD, LDAP) in SailPoint and Okta for automated provisioning and access governance.
• Integrated SaaS and on-premises applications with IAM systems, including Okta, SailPoint, and IBM Security Acces

Bachelor of Electronics and Communication Engineering (B.E. ECE) - Electronics and Communication Engineering - Anna University of Technology, Coimbatore, India (2010)