Winston Kim

Experienced Identity and Access Management professional with expertise in engineering and supporting enterprise IAM, Privileged Access Management (PAM), cloud identity, authentication, authorization, and access-control solutions across government and commercial environments. Hands-on experience with Microsoft Entra ID, Active Directory, Delinea Secret Server, Delinea Platform, Ping Identity, PingFederate, SailPoint, Azure, SSO, MFA, JIT access, RBAC, and privileged-account management. Strong background supporting identity security across Windows, Linux/UNIX, and Azure environments, with experience troubleshooting complex authentication and access issues, implementing least-privilege controls, reviewing security architectures, and supporting IAM/PAM engineering initiatives.

Experienced with NIST 800-53, RMF, FedRAMP, STIG, vulnerability management, and federal security requirements. Holds U.S.

Top Secret Security

Clearance and certifications in Delinea, Microsoft Identity and Access Administration/ Azure, and CompTIA Security+.

SR. Unix/Linux Engineer - IAM Focus at Optiv+ ClearShark (2025-08 – 2026-06)

Support enterprise Identity and Access Management and Privileged Access Management initiatives across Linux/UNIX, Windows, and identity-management environments.

• Engineer and troubleshoot IAM/PAM solutions supporting privileged-account access, authentication, authorization, and secure resource access.
• Support Delinea Secret Server and Delinea Platform environments, including configuration, access workflows, troubleshooting, validation, and security best practices.
• Analyze identity and access requirements and collaborate with engineering teams to develop secure implementation approaches.
• Troubleshoot complex authentication, authorization, domain connectivity, and privileged-access issues across Windows and Linux environments.
• Support implementation of least-privilege and role-based access principles for enterprise systems.
• Evaluate IAM/PAM architectures and identify opportunities to improve security, operational efficiency, and access governance.
• Develop technical documentation and engineering guidance for IAM/PAM implementations and operational processes.
• Collaborate with security, infrastructure, and application teams to resolve identity-related technical issues.
• Continue advanced development in Delinea, Ping Identity, federation, PAM, and enterprise IAM architecture.

Information System Security Officer (ISSO) - Mid-Level at Tunuva Technologies, Inc. (2024-10 – 2025-02)

Supported security authorization and compliance activities for government information systems under the NIST Risk Management Framework.

• Applied NIST 800-53 security controls to system architectures, access controls, and security documentation supporting Authorization to Operate (ATO).
• Reviewed identity and access configurations across Active Directory, Windows, Linux, and Azure environments.
• Evaluated permissions, privileged access, and account-management practices against least-privilege and role-based access-control principles.
• Supported security architecture assessments involving authentication, authorization, network segmentation, and boundary protection.
• Used Splunk, Tenable, and ServiceNow to support security monitoring, vulnerability management, incident tracking, and remediation.
• Analyzed vulnerability findings and developed mitigation strategies in coordination with engineering teams.
• Maintained and reviewed security documentation, system inventories, control implementations, and assessment evidence.
• Supported continuous monitoring and security compliance activities for regulated government environments.

Cloud Service Engineer | Azure Escort Operator at Zachary Piper Solutions, Accenture Federal Site - Microsoft (2024-04 – 2024-08)

Supported secure access to Microsoft Azure Government environments using MFA, Just-In-Time access, privileged access controls, and security policies.

• Managed and monitored privileged developer access sessions in accordance with federal cloud security requirements.
• Investigated and remediated a production security incident involving a JIT access-policy configuration issue.
• Used PowerShell to investigate and remediate configuration and deployment issues.
• Supported Azure Key Vault, encryption, secure access approvals, and cloud security controls.
• Monitored authentication and access activity and resolved security and operational incidents.
• Collaborated with cloud engineering and security teams on change management, troubleshooting, and secure deployment activities.
• Provided 24x7 support for cloud environments while maintaining SLA and security requirements.

IAM Support Specialist at Dan Solutions Inc (2023-05 – 2024-04)

Administered enterprise identities, users, groups, and access policies using Microsoft Entra ID and Active Directory.

• Supported identity lifecycle activities including account provisioning, access changes, onboarding, and deprovisioning.
• Troubleshot authentication, authorization, account, and access issues across enterprise environments.
• Supported evaluation of IAM platforms including SailPoint, Radiant Logic, and Microsoft Entra ID.
• Assisted with IAM architecture discussions, technology evaluations, vendor coordination, and technical documentation.
• Supported enterprise access-management processes and security best practices.
• Collaborated with IT and cybersecurity teams to resolve identity-related incidents and improve access controls.

Bachelor of Science in Computer Science – Georgia State University