Gulmira Abdulkhafizova
Willow Grove,PA
Summary
Results-oriented SailPoint Developer specializing in Identity and Access Management (IAM) with extensive experience in SailPoint IdentityIQ and ISC. Designed and implemented identity governance frameworks, automated user lifecycle management, and enhanced security controls within enterprise environments, contributing to compliance and operational efficiency in regulated industries. Resourceful Management Engineer with expertise in process optimization and workflow management, driving organizational improvements through strategic planning and effective communication.
Overview
8
8
years of professional experience
4
4
years of post-secondary education
Work History
Senior IAM Engineer
OneMain Financial
06.2025 - Current
- Engineered and supported VEZA Identity Governance and Access Management platform, enhancing enterprise-wide access visibility and control.
- Designed hybrid IAM controls that integrated automated provisioning workflows with governance-driven review processes, improving compliance and security.
- Configure and optimize Identity Lifecycle Management (ILM) processes, including Joiner, Mover, and Leaver workflows.
- Execute and validate User Access Reviews (UAR), ensuring entitlement accuracy and regulatory compliance (SOX, PCI, Privacy).
- Engineer and execute identity integrations across VEZA, Adaxes, and Azure AD using automation scripts and structured CSV ingestion, including configuration, schema mapping, correlation, and reconciliation validation.
- Configured custom access rules and role/group provisioning logic, streamlining backend automation workflows (including MFA resets and lifecycle enforcement) to strengthen identity governance and access control.
- Perform identity reconciliation and entitlement validation across integrated systems.
- Support SSO and MFA integrations in collaboration with Okta and application teams.
- Document IAM governance standards and operational procedures to support audit readiness
IAM Engineer – SailPoint Identity IQ and ISC, OKTA
Fannie Mae
Washington, DC
02.2024 - 05.2025
- Led the full lifecycle management of SailPoint Identity IQ in a high-transaction banking environment. Managed the entire implementation of SailPoint IIQ in a banking environment, ensuring smooth onboarding, provisioning, access governance, and de-provisioning processes. Designed workflows to handle high transaction loads while maintaining security and compliance.
- Led identity governance and administration (IGA) initiatives, aligning identity lifecycle policies with compliance standards (e.g., NIST, SOC 2, HIPAA) while implementing role-based access control (RBAC) and access certification processes to uphold least privilege and zero-trust security principles.
- Performed integration with applications like Workday, Okta, LDAP, and JDBC for provisioning. Configured connectors for Workday (HR-driven identity governance), Okta (SSO and MFA), LDAP (directory services), and JDBC (custom database integrations) to enable seamless user onboarding, provisioning, and role-based access management (RBAC).
- Deployed SailPoint IIQ in on-premises and AWS environments, integrating with enterprise applications to ensure secure identity governance.
- Used Beanshell to create custom rules and workflows in SailPoint IIQ. Developed and customized rules, policies, and workflow automation in SailPoint using Beanshell scripting, enhancing identity provisioning, role mining, and access certification processes.
- Customized SailPoint IIQ's user interface (UI) to enhance usability and efficiency in access review and certification processes, supporting regulatory compliance (e.g., SOX, GDPR, PCI-DSS).
- Provided Tier 3 customer support and acted as the subject matter expert. Addressed complex IAM issues, troubleshooting authentication, authorization, and identity lifecycle issues in SailPoint and other IAM solutions.
SailPoint Identity IQ Developer
TD Bank
Mt Lauren, NJ
12.2022 - 02.2024
- Developed custom workflows and automation scripts using Beanshell to optimize identity governance, access request approvals, and provisioning processes. Created dynamic role assignments and access policies based on job functions, user attributes, and risk levels to enhance Role-Based Access Control (RBAC).
- Designed event-driven automation rules that trigger notifications, provisioning actions, and compliance reviews based on real-time identity changes. Customized SailPoint UI elements to improve access review processes, reducing friction for end-users while maintaining security compliance.
- Led root cause analysis (RCA) and troubleshooting for access failures, authentication errors, and performance degradation issues in SailPoint and integrated applications. Identified and mitigated security vulnerabilities related to orphaned accounts, excessive privileges, and misconfigured role mappings.
- Tuned SailPoint connectors, workflows, and API integrations to improve response times, reducing IAM-related authentication delays. Provided Tier-3 support during critical IAM deployments, ensuring a smooth transition for on-prem and cloud environments.
- Development and deployment of custom applications within the Okta framework to meet specific organizational needs. Built custom applications leveraging Okta's API framework, integrating SSO and MFA capabilities.
- Managed the lifecycle of over 50 applications within Okta, including provisioning, updating, and retirement in alignment with security best practices. Oversaw application onboarding, provisioning, and deprovisioning, ensuring strict adherence to IAM security policies.
- Automated identity provisioning and deprovisioning processes using Okta Workflows. Developed Okta Workflows to automate identity lifecycle events, reducing manual workload and improving operational efficiency.
- Enhanced UI and certification processes in SailPoint as per client requirements, improving user experience and operational efficiency. Managed end-to-end SailPoint implementation, ensuring successful deployment and integration.
- Developed installation, configuration, and deployment methods for SailPoint solutions, streamlining the setup process. Orchestrated identity governance and administration activities, ensuring comprehensive oversight and control.
IAM SailPoint Developer
Neuberger Berman Group
11.2021 - 12.2022
- Participated in all phases of SailPoint implementation, from configuring connectors and creating custom rules to developing and optimizing workflows.
- Managed the onboarding of applications using Active Directory, JDBC, and Delimited File connectors, ensuring seamless identity synchronization.
- Designed and implemented RBAC policies in SailPoint, enhancing security, compliance, and operational efficiency.
- Guided junior team members and collaborated with cross-functional teams to develop scalable IAM solutions that meet organizational needs.
- Built and fine-tuned custom workflows, rules, and connectors, aligning IAM processes with business needs.
- Integrated directory services to automate user provisioning and deprovisioning, improving identity lifecycle management.
- Skilled in SailPoint IIQ (versions 7.x, 8.x) and ISC, ensuring compatibility with evolving IAM strategies.
- Led technical teams, conducted code reviews, and ensured best practices were followed in IAM development.
- Executed end-to-end IAM solution development, overseeing initial design, deployment, and ongoing support to maintain system integrity.
- Created custom SailPoint BuildMap Rules and automated workflows to enhance identity governance.
Cybersecurity Analyst
Geico Insurance
Chevy Chase, MD
03.2018 - 05.2021
- Designed and implemented security protocols to protect computer networks from cyber threats, ensuring a proactive defense strategy.
- Integrated Tenable Nessus into the security framework, conducting comprehensive vulnerability scans to identify and mitigate security risks and configuration issues.
- Deployed Prisma WAAS (Palo Alto) to strengthen the security of web applications and APIs, protecting critical assets from cyber threats.
- Managed risk assessments and compliance efforts, ensuring adherence to internal security policies and external regulatory requirements.
- Utilized SecurityScorecard for comprehensive cybersecurity evaluations, assessing network security, DNS health, patching cadence, and endpoint security across internal systems and vendors.
- Developed and implemented comprehensive security policies and guidelines to maintain compliance with legal and regulatory standards.
- Developed and maintained documentation and validation processes, ensuring compliance with organizational standards for security, privacy, and information assurance.
- Advised leadership on security and privacy matters, advocating for enhancements in security policies and frameworks.
- Ensured that security initiatives aligned with organizational priorities, driving improvements in security policies and best practices.
Education
Bachelor of Science - Computer Science
Andijan State University
Andijan, Uzbekistan 08.2013 - 02.2017
Skills
- Identity governance
- Access management
- Role-based access control
- Lifecycle management
- Compliance auditing
- Risk assessment
- Security protocols
- Cloud security solutions
- IAM operations
- Workflow automation
- User access reviews
- Technologies: SailPoint IIQ, Veza, ISC, Adaxes, AWS, Active Directory, LDAP, Oracle, OKTA, CyberArk, MS Entra
- Tools: Git, Jenkins, Okta, Docker, Kubernetes, Tenable Nessus, SecurityScorecard, Palo Alto PRISMA WAAS, Sophos
- Languages: Java, BeanShell, SQL, JavaScript, PowerShell, Python
- Problem-solving
- Tools: Git, Jenkins, Okta, Docker , Kubernetes, Tenable Nessus, SecurityScorecard, Palo Alto PRISMA WAAS, Sophos
- Workflow management
Timeline
Senior IAM Engineer
OneMain Financial
06.2025 - Current
IAM Engineer – SailPoint Identity IQ and ISC, OKTA
Fannie Mae
02.2024 - 05.2025
SailPoint Identity IQ Developer
TD Bank
12.2022 - 02.2024
IAM SailPoint Developer
Neuberger Berman Group
11.2021 - 12.2022
Cybersecurity Analyst
Geico Insurance
03.2018 - 05.2021
Bachelor of Science - Computer Science
Andijan State University
08.2013 - 02.2017