Senior IAM Engineer (8 10 Years Experience)

• Designed, implemented, and maintained enterprise Single Sign-On (SSO) solutions using OneLogin, Microsoft Entra ID, and custom identity broker frameworks.
• Developed custom authentication and federation workflows integrating legacy and modern applications using OIDC, OAuth 2.0, and SAML protocols.
• Engineered secure MFA solutions, adaptive authentication policies, and risk-based access controls to strengthen organizational security posture.
• Implemented and managed custom authorization servers, token claims, signing certificates, encryption mechanisms, and JWT-based authentication frameworks.
• Designed and integrated FIDO2/WebAuthn authentication, certificate-based authentication, and device trust models for enhanced user verification.
• Developed IAM automation scripts and API integrations using Python, PowerShell, and Shell scripting to streamline identity lifecycle processes.
• Built and maintained SCIM-based user provisioning and de-provisioning workflows across enterprise applications.
• Conducted authentication and authorization threat modeling to identify risks such as token replay, session fixation, federation misconfigurations, and consent abuse.
• Managed Conditional Access policies, Enterprise Applications, and Hybrid Identity deployments within Microsoft Entra ID environments.
• Collaborated with security, application, and infrastructure teams as the IAM Subject Matter Expert (SME) to drive secure access strategies.
• Led troubleshooting and root-cause analysis for complex federation, authentication, and identity synchronization issues.
• Produced technical documentation, architecture designs, and executive-level presentations for IAM initiatives and security governance programs.

Infrastructure & Security Engineer (Windows, VMware, OpenShift, Security)

• Managed and administered Windows Server environments, ensuring high availability, performance, and operational reliability.
• Supported enterprise networking services including DNS, DHCP, TCP/IP, firewalls, routing, and network troubleshooting.
• Configured and maintained load balancers such as F5, NGINX, and HAProxy to optimize application performance and availability.
• Administered TLS/SSL certificate lifecycle management, including issuance, installation, renewal, and troubleshooting.
• Identified, assessed, and remediated infrastructure vulnerabilities using vulnerability management tools and enterprise security standards.
• Implemented server and network hardening controls to strengthen infrastructure security and compliance.
• Executed regular patch management activities across servers and infrastructure platforms, ensuring adherence to compliance requirements.
• Automated patch deployment and infrastructure administration tasks using PowerShell, Ansible, Bash, and Python scripting.
• Generated compliance, patching, and vulnerability remediation reports to support audits and governance requirements.
• Supported VMware-to-OpenShift migration initiatives, validating infrastructure dependencies and ensuring successful platform transitions.
• Collaborated with cross-functional teams to perform migration planning, execution, testing, and post-migration validation activities.
• Monitored infrastructure health, responded to operational alerts, and provided L2 support for critical incidents and service disruptions.
• Assisted in root cause analysis, incident resolution, and implementation of preventive measures to improve system stability.
• Worked with security and compliance teams to remediate audit findings and maintain adherence to enterprise security standards.
• Supported OpenShift/Kubernetes environments, contributing to container platform administration and operational support.
• Participated in enterprise change management processes and infrastructure modernization initiatives aligned with business objectives.