Jafar Olimjon

Designed and supported enterprise identity governance capabilities within SailPoint ISC, focusing on end-to-end lifecycle automation, compliance alignment, and structured onboarding of high-value internal audio-production applications.

Identity Integration & Engineering

• Built and maintained custom SCIM and REST integrations for onboarding non-standard applications, implementing pagination logic, throttling controls, and attribute normalization to ensure predictable, large-scale synchronization in a multi-tenant cloud environment.
• Tuned correlation rules to improve identity matching accuracy across multiple authoritative data sources, reducing duplicate identity creation and reconciliation failures.
• Implemented pre- and post-provisioning logic to enforce business-specific entitlement handling, retry pathways, and automated rollback for failed downstream provisioning events.

Governance, RBAC, and Compliance Alignment

• Partnered with audit and compliance teams to create certification campaign structures, reviewer mappings, and SoD logic tailored to audit-sensitive internal applications.
• Developed RBAC models that reduced entitlement sprawl and standardized access assignment across functional audio-engineering and editorial teams.
• Enhanced audit readiness by mapping application entitlements to Access Profiles, documenting authoritative sources, and ensuring traceable end-to-end provisioning flows.

Operational Stability & Monitoring

• Introduced batch processing improvements and identity refresh optimization for faster certification population and reduced queue delays.
• Collaborated with SecOps teams to integrate ISC logging into Splunk, enabling better monitoring of failed provisioning attempts, API rate-limits, and delta aggregation anomalies.

Supported both IAM governance and operational security activities, contributing to the development of structured access models and early lifecycle automation.

SOC & Threat Monitoring

• Conducted first-level SIEM analysis, alert triage, and escalation, supporting threat detection workflows and contributing to measurable improvements in incident response times.
• Participated in vulnerability assessments and patch-management cycles, documenting exposure patterns and assisting remediation planning.

IAM & Role Design

• Helped define and refine RBAC structures for internal systems, mapping coarse admin roles into more granular access layers to reinforce least-privilege principles.
• Documented onboarding/offboarding processes and created standardized access request procedures, improving provisioning consistency for more than 500 users.