Tinku Rao

IAM Technical Lead with experience delivering enterprise identity security solutions across healthcare,

financial services, and telecommunications domains. Specialized in SailPoint IdentityIQ, Okta, and

Identity Governance & Administration (IGA), supporting enterprise environments of 75K–150K+ users in highly regulated settings. Experienced in designing and implementing cloud-first, Zero Trust IAM architectures across Microsoft Entra ID, AWS, and hybrid identity ecosystems, improving security posture, reducing identity risk, and strengthening audit readiness. Strong background in leading IAM modernization initiatives, including automation and DevSecOps-aligned identity governance.

Proven ability to collaborate with global teams and deliver scalable identity solutions aligned with enterprise security and compliance requirements.

Professional Experience IAM

IAM SailPoint DevOps Lead

Wipro Ltd | Project: Telefónica Germany | Hyderabad, India | Oct 2024 – July 2026

• Provided L2/L3/L4 production support for SailPoint IdentityIQ, troubleshooting provisioning failures, aggregation errors, workflow issues, connector problems, and access request/certification failures for 75K+ identities on AWS cloud infrastructure.
• Performed root cause analysis using IIQ debug logs, workflow traces, audit logs, database queries, and connector logs, implementing corrective/preventive fixes that reduced incident recurrence.
• Managed incident, problem, and change tickets per ITIL processes, maintaining 98%+ SLA compliance; implemented Elastic/Kibana monitoring and alerting that cut MTTR by 40%.
• Designed and implemented Joiner-Mover-Leaver (JML) workflows — identity creation,

attribute updates, provisioning/deprovisioning, and termination — cutting onboarding time from 2 days to under 1 day.

• Integrated IdentityIQ with Active Directory, LDAP, HR systems, databases, and cloud apps,

automating provisioning/deprovisioning across 150+ applications.

• Developed and customized IIQ workflows, rules, BeanShell/Java logic, forms, and provisioning policies; built custom connectors and REST/SOAP integrations, reducing manual intervention by 60%.
• Performed application onboarding, account/entitlement aggregation, identity correlation,

and refresh operations, troubleshooting data and connectivity issues across source/target systems.

• Designed and maintained RBAC/ABAC models, roles, entitlement structures, and access policies supporting least-privilege governance.
• Managed access certification campaigns end-to-end (configuration, review, remediation,

escalation), achieving 98% on-time completion in support of SOX/GDPR compliance.

• Implemented and monitored Segregation of Duties (SoD) controls, identifying and remediating high-risk access combinations for audit readiness.
• Supported IIQ upgrades, migrations, patches, and deployments — including impact analysis, testing, and post-deployment validation — using GitLab CI/CD for automated,

version-controlled releases; optimized tasks/queries to cut job execution time by 30%.

• Mentored junior IAM engineers on troubleshooting and IIQ best practices; maintained

Confluence documentation, SOPs, and runbooks to standardize support processes.

IAM Okta and SailPoint Lead

Wipro Ltd | Project: FedEx Corp | Denver, USA & Hyderabad, India | Apr 2021 – Sep 2024

• Delivered L2/L3/L4 production support and engineering for Okta Identity Cloud serving 100K+ users and 500+ enterprise applications across Dev, QA, and

Production, sustaining 99.9%+ platform availability.

• Led root-cause analysis (RCA) for recurring SSO, MFA, and Lifecycle Management incidents in business-critical environments and implemented permanent corrective fixes, reducing repeat incident volume.
• Designed and built Okta Workflows automating Joiner-Mover-Leaver (JML)

processes, provisioning/deprovisioning, and access notifications, cutting manual

IAM ticket volume and processing time.

• Architected and supported enterprise SAML 2.0, OAuth 2.0, OIDC, SCIM, and SWA integrations; resolved authentication failures, API errors, and connector/datamapping issues across downstream systems.
• Administered Universal Directory, profile sourcing/mappings, and AD/LDAP synchronization, including AD Agent configuration; designed RBAC models and

Adaptive MFA policies enforcing least-privilege access.

• Built automation using Okta REST APIs to eliminate repetitive operational tasks and improve IAM support team efficiency.
• Managed incident, problem, and change management under ITIL processes across both platforms, including tenant/instance configuration changes and disaster recovery support.
• Administered and troubleshot F5 Access Gateway (LTM/APM), improving application access performance by ~15% and reducing access-related incidents.
• Authored runbooks, RCA reports, and knowledge base articles standardizing troubleshooting for Okta environments and accelerating new-engineer onboarding.
• Provided SailPoint administration and Development support as part of the Conjure

Project.

• Mentored L1/L2 engineers on incident resolution, integrations, and workflow/rule development across both platforms; partnered cross-functionally with security,

network, and application teams.

• Participated in 24x7 on-call rotation for critical IAM services, consistently meeting

SLA targets for incident resolution.

Technical Lead, IAM & Governance

Wipro Ltd | CommonSpirit Health (Aka Catholic Health Initiatives) | Denver, USA & Hyderabad,

India | Nov 2012 – Mar 2021

• Led enterprise-wide Identity & Access Management (IAM) operations supporting 150K+

users across clinical, administrative, and contractor populations in a multi-hospital environment.

• Owned end-to-end Joiner–Mover–Leaver (JML) lifecycle processes across Active Directory,

Okta, and Microsoft Office 365, reducing provisioning turnaround time by ~35%.

• Administered and optimized Windows Active Directory (users, groups, OUs, GPOs),

improving access governance and reducing access-related incidents by ~25%.

• Engineered PowerShell-based automation solutions for bulk provisioning, deprovisioning,

and audit reporting, eliminating 40%+ manual effort and improving data accuracy.

• Managed Okta Identity Cloud (SSO, MFA, Lifecycle Management), integrating with AD, O365,

and EHR platforms, enabling centralized authentication and enhancing user experience.

• Designed and enforced Role-Based Access Control (RBAC) frameworks, ensuring least privilege and SoD compliance, reducing audit findings by ~30%.
• Supported secure access management for critical EHR systems including Cerner, Meditech,

Allscripts, eClinicalWorks, and STAR, ensuring uninterrupted clinical operations.

• Led access certification campaigns, audit readiness, and compliance reporting aligned with

HIPAA, HITECH, and SOX, achieving 100% audit compliance over multiple cycles.

• Partnered with InfoSec, Compliance, and Clinical IT teams to align IAM controls with patient care workflows and regulatory requirements.
• Managed and mentored a team of 20 IAM engineers and analysts, driving SLA adherence,

KPI improvements, and operational excellence.

• Monitored IAM infrastructure, directory sync jobs, and identity workflows, achieving 99.9%

system availability and reducing incident MTTR by ~30%.

• Championed continuous improvement initiatives, increasing automation maturity and improving service delivery efficiency by ~25%.

IAM Senior Security Analyst

Wipro Ltd | UBS Group AG | Singapore | Aug 2009 – Oct 2012

• Managed end-to-end user lifecycle (Joiner–Mover–Leaver) for 65K+ users across global banking applications and infrastructure using a custom enterprise IAM platform, ensuring timely provisioning and deprovisioning in compliance with SLAs.
• Administered Role-Based Access Control (RBAC) using the Home Group access management system, defining and maintaining access rules that improved provisioning accuracy by ~25%.
• Automated JML workflows using PowerShell scripting and rule-based controls, reducing manual intervention by ~30% and improving turnaround time for access requests.
• Partnered with business and application stakeholders to identify and remediate Segregation of Duties (SoD) conflicts, reducing audit findings and strengthening access governance controls.
• Performed access reviews, log analysis, and system reconciliation checks, ensuring compliance with internal security policies and external regulatory requirements (e.g., SOX).
• Collaborated with global IAM, risk, and audit teams to enhance access governance processes, improving audit readiness and reducing access-related incidents across business units.

Earlier Career

Held progressive roles including Network Security Analyst, Identity & Access Management Engineer,

Qualys Guard Analyst, and Senior Project Engineer with Wipro Ltd and Tech Mahindra (V-Customer

Pvt Ltd), supporting enterprise clients such as CIGNA Health and Hewlett-Packard. Gained experience in network security operations, identity and access management, vulnerability assessment (Qualys),

and enterprise IT security controls including access governance, user provisioning, and regulatory compliance support.

Education

• Advanced Diploma in Management (Postgraduate Diploma equivalent) — Institute of

Chartered Financial Analysts of India (ICFAI)

• Bachelor of Commerce (Honours), University of Calcutta