Victoria Thomas

IAM Analyst with 7 years of experience delivering identity governance, access administration, and privileged access management across global enterprise environments. Hands-on ownership of SailPoint IdentityIQ, Okta, Active Directory, and Microsoft Entra ID covering the full joiner-mover-leaver lifecycle, access certification campaigns, RBAC design, federation, and service account governance. Builds audit-ready IAM controls mapped to SOX, ISO 27001, SOC 2, and NIST 800-53, and automates provisioning workflows that cut manual effort and access turnaround time.

Microsoft Cybersecurity Architect

Expert (SC-100) and Azure Security Engineer (AZ-500) certified, with an MS in Management Information Systems.

IAM Analyst at COGENT INFOTECH (2024-05 – Present)

• Own end-to-end identity lifecycle management across Active Directory, LDAP, Microsoft Exchange, UNIX, and enterprise applications, executing onboarding, offboarding, transfers, and role changes under least-privilege standards.
• Perform user provisioning and deprovisioning in SailPoint IdentityIQ, aligning entitlement grants to defined business roles and eliminating standing access outside approved role scope.
• Lead periodic access certification and user access review campaigns, validating entitlements against SOX, ISO 27001, and internal control requirements and producing evidence packages for audit.
• Govern service accounts and privileged accounts through enforced approval workflows, ownership documentation, and periodic recertification, extending identity governance controls to non-human identities.
• Identified critical misconfigurations in IAM policies and cloud storage bucket permissions, remediating exposed access paths and measurably reducing enterprise breach risk.
• Partner with business and application owners to define RBAC models, and onboard enterprise applications into SailPoint by documenting access models, mapping entitlements, and validating role assignments.
• Support Privileged Access Management operations including privileged account provisioning, session monitoring, and least-privilege enforcement across sensitive systems.
• Administer Okta identity services covering application assignments, group management, MFA enrollment, and SSO access, alongside Active Directory account, security group, distribution list, and OU administration.
• Investigate and resolve IAM incidents spanning account lockouts, permission conflicts, failed provisioning, and authentication failures, while processing high-volume access requests in ServiceNow within SLA.
• Automate provisioning workflows to reduce manual administrative effort and shorten access request turnaround time.

IAM Administrator at PWC (2021-07 – 2024-04)

• Configured and maintained SSO integrations in Okta for over 30 enterprise applications, managing ongoing user access and entitlement assignment.
• Configured Microsoft Entra ID (Azure AD) as both Identity Provider and Service Provider to deliver federated single sign-on, and governed enterprise application registrations, admin consent workflows, and federation services.
• Designed and enforced Conditional Access and application protection policies securing user and device access to enterprise resources.
• Managed privileged access through CyberArk PAM and Thycotic Secret Server Cloud, onboarding and offboarding privileged accounts, monitoring privileged sessions with RSA token authentication, and remediating risky sign-in activity across Azure AD and AWS.
• Implemented IAM controls aligned to ISO 27001, SOC 2, and NIST 800-53, configured access review policies, and generated periodic compliance and audit reports to evidence control effectiveness.
• Deployed and maintained Azure AD Application Proxy to provide secure external access to on-premises applications without exposing internal network infrastructure.
• Enabled multi-factor authentication for legacy applications lacking modern protocol support by implementing RADIUS authentication and NPS Extension.
• Built provisioning systems for application access entitlements and joiner-mover-leaver processes, improving onboarding efficiency across the enterprise.
• Configured and managed Office 365 services across cloud and hybrid environments including Exchange Online, Teams, and Outlook, and supported audit preparation by maintaining current IAM control documentation.

IT Support Specialist at XCEL ENERGY (2019-07 – 2021-02)

• Administered Active Directory users, groups, organizational units, and security permissions, creating, modifying, disabling, and unlocking accounts and building security groups to business requirements.
• Managed Microsoft 365 user provisioning, licensing, shared mailboxes, and distribution groups, and supported Exchange Online, Teams, SharePoint, and OneDrive administration.
• Delivered Tier 1 and Tier 2 support across phone, email, chat, and remote tools, resolving access, authentication, hardware, software, and connectivity issues within SLA targets.
• Troubleshot Group Policy application and user authentication failures, and managed password resets and access across Active Directory, Microsoft 365, and enterprise applications.
• Diagnosed VPN, Wi-Fi, DNS, DHCP, and TCP/IP connectivity issues, supported LAN/WAN infrastructure, and assisted network engineers with configuration and troubleshooting.

Master of Science in Management Information Systems – Lamar University, Texas, USA (2023 – 2024)

Bachelor of Science in Computer Science – Ekiti State University (2013 – 2017)