NIKITA PATEL
Colonia
Summary
IAM Engineer with 8+ years of experience operating, enhancing, and automating enterprise Identity & Access Management platforms across SailPoint IdentityIQ (7.x–8.x), Okta, Active Directory, and Azure AD. Expertise in identity lifecycle operations, access governance, RBAC, JML workflows, SSO/MFA, certifications, and compliance (SOX, PCI, GDPR). Skilled in automation using Python, PowerShell, REST APIs, and RPA frameworks to reduce manual workloads and improve SLA adherence. Strong background in troubleshooting complex provisioning failures, building scalable connectors, optimizing IAM processes, and supporting Zero Trust and least-privilege models. Proven track record of partnering with Security, Engineering, and Audit teams to enhance operational efficiency, reduce access risk, and maintain governance for large enterprises.
Overview
8
8
years of professional experience
1
1
Certification
Work History
IAM Engineer/SailPoint L3 Lead
State Street
North Quincy
03.2020 - Current
- Led L3 IAM operations for SailPoint IIQ, Active Directory, and Azure AD, ensuring stable lifecycle management, entitlement governance, and timely resolution of critical provisioning issues across the enterprise.
- Designed, built, and supported end-to-end identity lifecycle workflows (Joiner–Mover–Leaver), improving provisioning accuracy and reducing orphan accounts through automated reconciliation and access cleanup jobs.
- Implemented IAM automations using Python, PowerShell, REST APIs, and RPA frameworks to streamline onboarding, offboarding, and entitlement updates—reducing manual workload by 40–60%.
- Designed and deployed SailPoint-integrated RPA workflows enabling self-service access requests, cutting L1/L2 ticket volume and accelerating fulfillment of entitlement changes.
- Integrated SailPoint IIQ with CyberArk PAM to automate privileged account onboarding, credential rotation, and deprovisioning, aligning with corporate privileged access policies.
- Enforced Zero Trust and least-privilege principles by identifying risky entitlements, replacing standing privileged access with just-in-time elevation workflows.
- Built and enhanced RBAC models, access policies, BuildMap/Correlation rules, and automated remediation workflows for certification campaigns, improving audit-readiness and reducing policy violations.
- Investigated and resolved complex IAM operational issues including connector failures, aggregation errors, role-mapping conflicts, and application provisioning defects—driving root-cause prevention.
- Developed operational dashboards (Tableau, Jira, Dynatrace, Splunk) to monitor provisioning SLAs, certification status, stale accounts, policy drift, and infrastructure health.
- Supported internal SOX, PCI, HIPAA, GDPR, and FFIEC audits by providing evidence, logs, access reports, and technical process documentation.
- Performed SailPoint IIQ platform upgrades (7.x to 8.x), patching, performance tuning, task optimization, and regression testing to maintain operational stability.
- Created and maintained technical runbooks, troubleshooting guides, connector documentation, workflow diagrams, and operational SOPs to strengthen platform governance.
- Collaborated with Security, Risk, and Compliance teams to evaluate identity risks, remediate findings, and implement continuous improvement initiatives across IAM operations.
SailPoint Developer
Sony Picture Entertainment
Culver City
08.2019 - 02.2020
- Integrated key enterprise applications into SailPoint IIQ to automate certification processes, ensuring entitlement visibility, periodic access reviews, and audit readiness.
- Designed and implemented joiner/mover/leaver (JML) workflows with policy enforcement and developed RBAC models to simplify entitlement management and improve access governance.
- Analyzed post-certification reports, validated revocation actions, and used connector logs and aggregation results to ensure de-provisioned users no longer retained system access.
- Automated provisioning and deprovisioning of privileged accounts using SailPoint IdentityIQ workflows and REST APIs.
- Integrated privileged account workflows within SailPoint IIQ to automate onboarding/deprovisioning for CyberArk-managed identities.
- Supported the rollout of automated service account onboarding and credential rotation policies for application admins.
- Enhanced SailPoint task performance (aggregation, refresh tasks, certification generation) by tuning JVM settings, optimizing SQL queries, and restructuring IIQ tasks.
- Reduced rework by establishing structured QA/UAT cycles for SailPoint code releases, connector enhancements, and lifecycle workflow changes.
IAM Engineer
Capital Group
Irvine
07.2017 - 07.2019
- Designed and implemented SailPoint IIQ identity lifecycle workflows, access control policies, and automated provisioning logic to meet enterprise security and business requirements.
- Integrated SailPoint with cloud IAM platforms (Azure AD, AWS IAM) and on-prem directories (Active Directory, LDAP) using REST APIs, JDBC, and SOAP connectors, ensuring seamless authentication and authorization across systems.
- Developed and implemented SAML, OAuth2.0, and OpenID Connect-based integrations for single sign-on (SSO) and multi-factor authentication (MFA) across cloud and enterprise applications.
- Built certification event logic with dynamic manager relationships and role-specific entitlement checks.
- Configured SoD and policy violation reports for audit compliance.
Education
Master of Science - Computer Science
New York Institute of Technology
New York, US05.2017
Bachelor of Technology - Computer Science
Pacific Institute of Technology
Udaipur, India05.2014
Skills
IAM & Governance
- SailPoint IdentityIQ (IIQ)
- Identity Lifecycle Management
- Access Reviews & Certifications
- Role-Based Access Control (RBAC)
- Provisioning & Workflow Automation
- Identity Governance & Administration (IGA)
Access & Authentication
- SSO / MFA
- Federation: SAML, OAuth 20, OpenID Connect
- Active Directory & Azure AD
- CyberArk PAM
Technical
- Java / BeanShell
- PowerShell
- SQL (Oracle / SQL Server / MySQL)
- REST / SOAP APIs
- Workday Integration
Tools
- Git
- ServiceNow
- Postman
- Splunk / Dynatrace
Soft Skills
- Problem Solving
- Communication
- Collaboration
Certification
SailPoint Certified Identity Security Engineer (CISE)
Timeline
IAM Engineer/SailPoint L3 Lead
State Street
03.2020 - Current
SailPoint Developer
Sony Picture Entertainment
08.2019 - 02.2020
IAM Engineer
Capital Group
07.2017 - 07.2019
Master of Science - Computer Science
New York Institute of Technology
Bachelor of Technology - Computer Science
Pacific Institute of Technology