RAFAEL SERRANO
Las Vegas,NV
Summary
Results-driven IAM analyst with expertise in access management and security compliance across diverse sectors. Developed critical documentation to enhance onboarding processes and compliance, streamlining access for over 150 applications. Achieved significant operational efficiency and improved audit readiness through strategic initiatives.
Overview
1
1
Certificate
14
14
years of professional experience
Work History
IAM Analyst II
Exeter Finance LLC
Dallas, Texas
02.2025 - 06.2026
- Developed RBAC for ServiceNow Automation, enhancing access control efficiency
- Created Guides/SOP/Procedures for New Hires, improving onboarding processes
- Updated Roles/Job Codes/Cost Center codes to align with HR and RBAC, ensuring compliance
- Created and updated Active Directory accounts with security permissions, maintaining secure access
- Created Service Accounts with Powershell scripts and updated the AD, streamlining account management
- Designed workflow in SNOW to obtain approvals for proper access, reducing unauthorized access
- Utilized Azure Cloud to sync to AD and SNOW, improving data consistency
- Developed identity governance frameworks to enhance security and compliance.
- Collaborated with IT teams to integrate IAM solutions into existing systems.
- Conducted IAM assessments to identify current security posture and develop strategies for improvement.
- Analyzed application logs and monitored system performance to detect potential security incidents or unauthorized access attempts.
IAM Analyst
Fontainebleau Las Vegas
Las Vegas, Nevada
04.2024 - 02.2025
- Provisioned and de-provisioned access for over 150 applications, ensuring timely user access
- Created SOP and Access Matrix for Gaming and SOX applications, supporting audit readiness
- Updated Azure AD accounts to sync with Sailpoint Automation, improving identity management
- Created and updated Active Directory accounts with security permissions, maintaining compliance
- Collaborated with HR on new hires and contractor conversions, streamlining onboarding
- Executed AML procedures for GCB Audit by removing access for users, supporting regulatory compliance
- Delegated ServiceNow tickets to the helpdesk for provisioning, optimizing workflow
- Created dashboards in Sailpoint to show KPI and SLA's, enhancing performance tracking
- Implemented identity access management solutions to enhance security protocols.
- Developed and maintained role-based access control systems for sensitive data protection.
- Collaborated with IT teams to integrate identity management tools across platforms.
- Conducted regular audits of access rights to ensure policy adherence and security standards.
- Managed software updates for identity management systems to ensure optimal performance.
- Configured and maintained identity access management tools such as Active Directory, LDAP.
- Integrated third-party applications with corporate identity management systems.
- Implemented a multi-factor authentication system to meet security compliance standards.
IAM Analyst
JM&A Family
Deerfield Beach, Florida
01.2022 - 02.2024
- Created Business and IT roles in Sailpoint to automate access, increasing efficiency
- Developed automation processes in SailPoint for business owners and department heads, streamlining access requests
- Updated Azure AD accounts to sync with Sailpoint Automation, ensuring accurate provisioning
- Created and updated Active Directory accounts with security permissions, maintaining secure access
- Collaborated with HR on new hires and contractor conversions, improving onboarding
- Elicited, understood, and represented functional and nonfunctional requirements, ensuring alignment with business needs
- Articulated technology concepts to stakeholders and business processes to technical teams, improving communication
- Assigned Azure PIM roles for IT department with security access levels, enhancing security controls
- Developed and maintained role-based access control systems for sensitive data protection.
- Maintained up-to-date documentation regarding all changes made to the system.
- Monitored system logs for suspicious activity or unauthorized access attempts.
- Assisted with the development of new features and functionality within the organization's IAM platform.
- Performed testing to determine functionality or optimization.
- Conducted analyses addressing failure, reliability or yield improvement.
- Designed engineering experiments.
IAM Business Analyst
MGM Resorts International
Las Vegas, NV
10.2019 - 10.2021
- Created baselines for all applications, including new HR levels, job codes, and job descriptions, standardizing processes
- Collaborated with IAM team and stakeholders to develop features, aligning IAM services with business needs and security policies
- Provisioned and de-provisioned applications for terms, new hires, and transfer employees, ensuring proper access
- Ran SQL queries to provide data to application owners on permissions, supporting audits
- Utilized Azure application to process IAM permissions, improving access management
- Ran SSO application through Sailpoint IAM, enhancing authentication processes
- Created OKTA accounts for new/reinstated hires, expediting user onboarding
- Implemented fraud and anti-trust SOP procedures, regulating access for GCB and SOX compliance
- Analyzed business processes to identify improvement opportunities within the hospitality sector.
- Facilitated stakeholder meetings to discuss project status and gather feedback effectively.
- Created user-friendly training materials for new analytical systems and processes.
- Monitored project timelines and budgets by tracking milestones, deliverables, tasks.
- Gathered feedback from end users regarding usability issues related to applications or systems.
- Identified and analyzed user requirements, procedures and processes to develop optimization strategies.
Business Analyst- Gaming
Pinnacle Entertainment/ Penn National Gaming
Las Vegas, NV
11.2017 - 10.2019
- Analyzed complex formulas for gaming stats across all property casinos, supporting data-driven decisions
- Updated and installed OASIS models to the test environment, ensuring accurate testing
- Ran SQL statements in AS400 to find missing gaming data from the HALO Universe, improving data integrity
- Enabled and disabled permissions for both HALO universe and local CMS, maintaining secure access
- Remoted into servers to add Windows patches in the test environment, enhancing system security
- Provided operational, product, and technology support for assigned business units and systems, ensuring smooth operations
- Led and directed projects for assigned business units, coordinating resources and integration with business sponsors
- Supported LMS, Datamagine, ResNet, cash modules, accounts receivable, phone systems, Saflok, Showgate, and Stratton Warren, ensuring system reliability
- Coached and mentored new and junior Business Analysts on systems, processes, and vendor management, fostering team development
IT Compliance Administrator & Access Management
Barrick Gold
Las Vegas, NV
05.2015 - 09.2017
- Provisioned and de-provisioned access through 35 applications, maintaining secure environments
- Created new Active Directory accounts for new hires, contractors, vendors, and summer students, supporting onboarding
- Assigned specific security responsibilities to each user in Oracle, ensuring role-based access
- Created infrastructure for access control tools and documentation, standardizing access management
- Created encrypted security passwords for credentials for each new user or current employee, enhancing security
- Established communication tools for all mine sites and joint ventures, improving collaboration
- Integrated South America Oracle and North America Oracle with one provisioning system, streamlining processes
- Documented and created SOP for IT compliance, financial compliance, and business processes, supporting audit readiness
Identity & Access Management Level II/QA Analyst
Las Vegas Sands Corporation
Las Vegas, Nevada
10.2012 - 01.2015
- Provisioned and de-provisioned user and group accounts on gaming and non-gaming change applications, ensuring secure access
- Reported daily on assigned Security Administration team member's productivity, tracking performance
- Provisioned user and group accounts within Microsoft Active Directory and AS/400 environments, maintaining compliance
- Supported customer projects by performing assigned tasks on defined deadlines, ensuring timely delivery
- Assisted with periodic access reviews of user account access, supporting compliance requirements
- Created ACSC menus with functional keys for each department, improving user navigation
- Set levels for each job class associated with each group profile, standardizing access
- Implemented an ACSC Matrix to allow other departments to see changes to job classes, increasing transparency
- Created VM with VMWare to access IGT and WMS Gaming Reports for IT compliance, supporting audits
- Generated ACSC reports for IT compliance for PCI and SOX reviews, ensuring regulatory adherence
- Ran queries in ACCC to show data tables and subsystems for security access, supporting data analysis
- Established compatibility with third-party software products by developing programs for modification and integration, enhancing system interoperability
- Coordinated with systems partners to finalize designs and confirm requirements, ensuring project alignment
- Provided continued maintenance and development of bug fixes and patch sets for existing web applications, improving system stability
- Implemented company policies, technical procedures, and standards for preserving the integrity and security of data, reports, and access
- Executed functional, regression, and performance tests on systems.
- Documented testing processes and maintained quality assurance records.
- Reviewed requirement specifications for clarity and completeness.
- Communicated regularly with management to discuss quality trends.
- Assisted other members of the QA team in identifying areas for improvement in processes and procedures.
Education
Associate Degree - Computer Science/ Technology
High Technical Institute Phoenix Campus
Skills
- Business intelligence
- User provisioning
- ServiceNow administration
- Financial statements expertise
- Azure cloud integration
- Risk mitigation
- SIEM
- AWS
- PowerShell
- System analysis
- AML compliance
- SailPoint automation
- IGT
- OASIS360
- SailPoint Architect (Identity IIQ)
- Azure AD
- SQL querying
- Strategic planning
- VMware
- Security compliance
- Active Directory/Azure Cloud
- Active Directory management
- Workflow Analysis
- Test plan development
- AWS CloudFormation
- CyberArch
- Casino Gaming Systems
- Role-based access control
- Documentation creation
- MainFrame
- User & Development
- Customer service
- MS Excel
- OKTA administration
- IT SOX & PCI Compliance Controls
- IT Identity & access management
- PowerShell scripting
Certification
- Microsoft Certified: Azure Fundamentals
- ThinkCloudy - AWS Cloud BootCamp
Timeline
IAM Analyst II
Exeter Finance LLC
02.2025 - 06.2026
IAM Analyst
Fontainebleau Las Vegas
04.2024 - 02.2025
IAM Analyst
JM&A Family
01.2022 - 02.2024
IAM Business Analyst
MGM Resorts International
10.2019 - 10.2021
Business Analyst- Gaming
Pinnacle Entertainment/ Penn National Gaming
11.2017 - 10.2019
IT Compliance Administrator & Access Management
Barrick Gold
05.2015 - 09.2017
Identity & Access Management Level II/QA Analyst
Las Vegas Sands Corporation
10.2012 - 01.2015
Associate Degree - Computer Science/ Technology
High Technical Institute Phoenix Campus
Project Applications
- ACSC 7.4 to 10.1 integrated upgrade
- IT SOX Audit Maintenance for ACSC
- Forecasting and Trends Change Management
- Oracle R11i to R12 System Upgrade
- AS400 Accounting Interface
- Project/ and Portfolio Financial Progress, Performance, and Cost
- Reporting Microsoft
- OKTA Progress, Performance, and Cost
- Sailpoint Integration
Industries
- Hotel and Casino
- Mining and
- Metals Hospitality
- Medical