Robert Santa Ana

Senior Identity & Access Management (IAM) leader with 20+ years of experience driving enterprise IAM strategy across financial, healthcare, and aviation industries. Proven expertise in SailPoint IdentityIQ, CyberArk, AWS migrations, RBAC, audit & compliance, and modernizing access governance programs. Recognized for building high-performing engineering and operations teams, delivering automation-driven efficiencies, and strengthening security posture through scalable IAM solutions.

Senior Security Specialist, Workforce Identity & Access Management - PNC Financial Services

(2025-05 - 2026-05)

• Tracked and monitored open audit issues and remediation milestones across Identity and Access Management (IAM) functions to ensure timely resolution and compliance.
• Managed IAM requirements, stakeholder coordination, and workflow processes for the ServiceNow Transformation project.
• Applied working knowledge of Oracle Identity Manager (OIM) to support IAM operations, access governance, and process improvements.
• Developed and maintained a department-wide Risk Register for Workforce Identity & Access Management, providing leadership with visibility into key risks and mitigation efforts.

Manager / Product Manager, Enterprise Identity Services - Delta Air Lines

(2022-04 - 2025-02)

• Managed a team of IAM engineers and analysts overseeing operations, change control, break-fix tasks, and enhancements in multiple complex infrastructures.
• Supported migration of three key IAM applications to AWS: SailPoint IdentityIQ, Radiant Logic VDS, and Staff ID Minting Table.
• Served as Product Manager for Agile adoption—built three squads and drove epics/features/stories leveraging Agility.
• Produced weekly and monthly metrics to support decision-making and strategic initiatives.
• Oversaw ServiceNow operational metrics to prioritize daily workload.
• Managed confidential employee access requests and permissions while partnering closely with Human Resources to ensure compliance, security, and data privacy.
• Built strong partnerships with business stakeholders and third-party vendors.
• Mentored and coached staff to support career development.

Manager, Identity & Access Management - Northside Hospital

(2019-04 - 2022-04)

• Led IAM Operations team responsible for provisioning/deprovisioning via ServiceNow workflows.
• Delivered executive reporting on weekly and monthly IAM metrics.
• Partnered with hospital stakeholders to address access-related needs and issues.
• Identified and centralized unmanaged application access to strengthen governance.
• Directed IAM Engineering team supporting SailPoint IdentityIQ releases, fixes, and enhancements in multiple complex infrastructures.
• Oversaw a security advisory team conducting third-party risk assessments, policy exceptions, security awareness, and DLP escalations.
• Managed integration of SailPoint IIQ with a core identity database for EMR (Cerner) automation.
• Replaced manual paper access forms with a ServiceNow UI integrated into SailPoint IIQ.
• Partnered with the Clinical Informatics team to manage Role-Based Access Control (RBAC) and system provisioning for weekly cohorts of contracted clinicians.
• Maintained working knowledge of HIPAA requirements.
• Managed confidential employee access requests and permissions while partnering closely with Human Resources to ensure compliance, security, and data privacy.
• General knowledge of UltiPro Human Capital Management (HCM) system.
• Provided team mentorship and development.

Manager, Access Management - COUNTRY Financial

(2017-10 - 2019-04)

• Sponsored enterprise-wide Business Access Governance program.
• Managed a remote team of IAM analysts and engineers.
• Onboarded applications to SailPoint IIQ for automated provisioning, deprovisioning, and certifications.
• Improved certification cadence to meet audit expectations.
• Enhanced data governance by establishing Data Owners, Stewards, and System Owners and training them on access controls.
• Used Varonis to locate sensitive data, restrict access, and validate periodic certifications.
• Deployed approximately 245 RBAC models across business and IT.
• Improved entitlement clarity and automated joiner/mover/leaver processes.
• Addressed SOX audit findings related to access controls.
• Mentored team members for professional development.

Senior Manager, Information Security (IAM Program Owner) - Synovus Bank

(2000-05 - 2017-10)

• Directed enterprise IAM Program including analysts and system administrators.
• Led deployment, upgrades, and customization of SailPoint IdentityIQ, including connectors and automated provisioning in multiple complex infrastructures.
• Oversaw CyberArk implementation for privileged access management.
• Implemented role-based access control across the organization.
• Delivered a multi-year IAM strategy aligned with corporate security goals.
• Maintained 95%+ SLA performance within ServiceNow; produced KRI/KPI reporting for executives.
• Played an active role in SOX/internal audits, managing remediation plans and responses.
• Provided governance over IAM components for IT projects following least-privilege principles.
• Managed confidential employee access requests and permissions while partnering closely with Human Resources to ensure compliance, security, and data privacy.
• General knowledge of ADP and PeopleSoft Human Capital Management (HCM) systems.
• Developed strong stakeholder partnerships and vendor relationships.
• Mentored staff for ongoing growth and performance.

Associate of Science - Information Technologies - Southern New Hampshire University (2020-03 - 2023-04)