Professional Experience IAM
IAM SailPoint DevOps Lead
Wipro Ltd | Project: Telefónica Germany | Hyderabad, India | Oct 2024 – July 2026
- Provided L2/L3/L4 production support for SailPoint IdentityIQ, troubleshooting provisioning failures, aggregation errors, workflow issues, connector problems, and access request/certification failures for 75K+ identities on AWS cloud infrastructure.
- Performed root cause analysis using IIQ debug logs, workflow traces, audit logs, database queries, and connector logs, implementing corrective/preventive fixes that reduced incident recurrence.
- Managed incident, problem, and change tickets per ITIL processes, maintaining 98%+ SLA compliance; implemented Elastic/Kibana monitoring and alerting that cut MTTR by 40%.
- Designed and implemented Joiner-Mover-Leaver (JML) workflows — identity creation,
attribute updates, provisioning/deprovisioning, and termination — cutting onboarding time from 2 days to under 1 day.
- Integrated IdentityIQ with Active Directory, LDAP, HR systems, databases, and cloud apps,
automating provisioning/deprovisioning across 150+ applications.
- Developed and customized IIQ workflows, rules, BeanShell/Java logic, forms, and provisioning policies; built custom connectors and REST/SOAP integrations, reducing manual intervention by 60%.
- Performed application onboarding, account/entitlement aggregation, identity correlation,
and refresh operations, troubleshooting data and connectivity issues across source/target systems.
- Designed and maintained RBAC/ABAC models, roles, entitlement structures, and access policies supporting least-privilege governance.
- Managed access certification campaigns end-to-end (configuration, review, remediation,
escalation), achieving 98% on-time completion in support of SOX/GDPR compliance.
- Implemented and monitored Segregation of Duties (SoD) controls, identifying and remediating high-risk access combinations for audit readiness.
- Supported IIQ upgrades, migrations, patches, and deployments — including impact analysis, testing, and post-deployment validation — using GitLab CI/CD for automated,
version-controlled releases; optimized tasks/queries to cut job execution time by 30%.
- Mentored junior IAM engineers on troubleshooting and IIQ best practices; maintained
Confluence documentation, SOPs, and runbooks to standardize support processes.
IAM Okta and SailPoint Lead
Wipro Ltd | Project: FedEx Corp | Denver, USA & Hyderabad, India | Apr 2021 – Sep 2024
- Delivered L2/L3/L4 production support and engineering for Okta Identity Cloud serving 100K+ users and 500+ enterprise applications across Dev, QA, and
Production, sustaining 99.9%+ platform availability.
- Led root-cause analysis (RCA) for recurring SSO, MFA, and Lifecycle Management incidents in business-critical environments and implemented permanent corrective fixes, reducing repeat incident volume.
- Designed and built Okta Workflows automating Joiner-Mover-Leaver (JML)
processes, provisioning/deprovisioning, and access notifications, cutting manual
IAM ticket volume and processing time.
- Architected and supported enterprise SAML 2.0, OAuth 2.0, OIDC, SCIM, and SWA integrations; resolved authentication failures, API errors, and connector/datamapping issues across downstream systems.
- Administered Universal Directory, profile sourcing/mappings, and AD/LDAP synchronization, including AD Agent configuration; designed RBAC models and
Adaptive MFA policies enforcing least-privilege access.
- Built automation using Okta REST APIs to eliminate repetitive operational tasks and improve IAM support team efficiency.
- Managed incident, problem, and change management under ITIL processes across both platforms, including tenant/instance configuration changes and disaster recovery support.
- Administered and troubleshot F5 Access Gateway (LTM/APM), improving application access performance by ~15% and reducing access-related incidents.
- Authored runbooks, RCA reports, and knowledge base articles standardizing troubleshooting for Okta environments and accelerating new-engineer onboarding.
- Provided SailPoint administration and Development support as part of the Conjure
Project.
- Mentored L1/L2 engineers on incident resolution, integrations, and workflow/rule development across both platforms; partnered cross-functionally with security,
network, and application teams.
- Participated in 24x7 on-call rotation for critical IAM services, consistently meeting
SLA targets for incident resolution.
Technical Lead, IAM & Governance
Wipro Ltd | CommonSpirit Health (Aka Catholic Health Initiatives) | Denver, USA & Hyderabad,
India | Nov 2012 – Mar 2021
- Led enterprise-wide Identity & Access Management (IAM) operations supporting 150K+
users across clinical, administrative, and contractor populations in a multi-hospital environment.
- Owned end-to-end Joiner–Mover–Leaver (JML) lifecycle processes across Active Directory,
Okta, and Microsoft Office 365, reducing provisioning turnaround time by ~35%.
- Administered and optimized Windows Active Directory (users, groups, OUs, GPOs),
improving access governance and reducing access-related incidents by ~25%.
- Engineered PowerShell-based automation solutions for bulk provisioning, deprovisioning,
and audit reporting, eliminating 40%+ manual effort and improving data accuracy.
- Managed Okta Identity Cloud (SSO, MFA, Lifecycle Management), integrating with AD, O365,
and EHR platforms, enabling centralized authentication and enhancing user experience.
- Designed and enforced Role-Based Access Control (RBAC) frameworks, ensuring least privilege and SoD compliance, reducing audit findings by ~30%.
- Supported secure access management for critical EHR systems including Cerner, Meditech,
Allscripts, eClinicalWorks, and STAR, ensuring uninterrupted clinical operations.
- Led access certification campaigns, audit readiness, and compliance reporting aligned with
HIPAA, HITECH, and SOX, achieving 100% audit compliance over multiple cycles.
- Partnered with InfoSec, Compliance, and Clinical IT teams to align IAM controls with patient care workflows and regulatory requirements.
- Managed and mentored a team of 20 IAM engineers and analysts, driving SLA adherence,
KPI improvements, and operational excellence.
- Monitored IAM infrastructure, directory sync jobs, and identity workflows, achieving 99.9%
system availability and reducing incident MTTR by ~30%.
- Championed continuous improvement initiatives, increasing automation maturity and improving service delivery efficiency by ~25%.
IAM Senior Security Analyst
Wipro Ltd | UBS Group AG | Singapore | Aug 2009 – Oct 2012
- Managed end-to-end user lifecycle (Joiner–Mover–Leaver) for 65K+ users across global banking applications and infrastructure using a custom enterprise IAM platform, ensuring timely provisioning and deprovisioning in compliance with SLAs.
- Administered Role-Based Access Control (RBAC) using the Home Group access management system, defining and maintaining access rules that improved provisioning accuracy by ~25%.
- Automated JML workflows using PowerShell scripting and rule-based controls, reducing manual intervention by ~30% and improving turnaround time for access requests.
- Partnered with business and application stakeholders to identify and remediate Segregation of Duties (SoD) conflicts, reducing audit findings and strengthening access governance controls.
- Performed access reviews, log analysis, and system reconciliation checks, ensuring compliance with internal security policies and external regulatory requirements (e.g., SOX).
- Collaborated with global IAM, risk, and audit teams to enhance access governance processes, improving audit readiness and reducing access-related incidents across business units.
Earlier Career
Held progressive roles including Network Security Analyst, Identity & Access Management Engineer,
Qualys Guard Analyst, and Senior Project Engineer with Wipro Ltd and Tech Mahindra (V-Customer
Pvt Ltd), supporting enterprise clients such as CIGNA Health and Hewlett-Packard. Gained experience in network security operations, identity and access management, vulnerability assessment (Qualys),
and enterprise IT security controls including access governance, user provisioning, and regulatory compliance support.
