SONAI MUTHU NACHIAPPAN
Plano
Summary
IAM Technical Lead with 13+ years of experience designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions across banking and financial services domains.
Expertise in SailPoint IIQ, Workday integration, RBAC process, SoD policy implementation, and large-scale application onboarding. Proven ability to lead teams, drive IAM transformations, and deliver secure, scalable access governance solutions.
Overview
13
13
years of professional experience
Work History
Technical Lead
Tata Consultancy Services Limited
Chennai
03.2017 - Current
- engaging in diverse task categories including onboarding of new applications, application/configuration enhancements, and addressing production issues.
- Onboarded applications including Workday, web service, AD-based target system, disconnected app, and JDBC to enhance system integration.
- Worked on end-to-end integration of Workday connector in Sailpoint IIQ and made workday as authoritative application for TFS environment to automate all the life cycle events.
- Updated identity configuration objects to set source and target mapping for all identity attributes in SailPoint.
- possess strong knowledge of life cycle events and managed joiner/termination/transfer/name change events.
- Integrated multiple web service-based applications (REST) within SailPoint IIQ and developed custom solutions to fulfill requirements.
- possessing strong knowledge of Postman tool for accessing target system via API calls and achieving similar results in SailPoint.
- Demonstrate strong knowledge in rule creation to customize data achieving unique solutions and handle various rule types in SailPoint.
- strong knowledge of utilizing SailPoint’s API for rule development in SailPoint.
- Utilize extensive knowledge of provisioning policy and data transmission to provisioning plan, handling numerous cases necessitating customized data adjustments for target system.
- Developed privileged account creation strategy in Active Directory, implementing multi-account solutions for identical users in AD system.
- Executed RBAC approach for TFS environment, enhancing security for birthright provisioning process.
- Strong knowledge in Role creation, assignment criteria in Business role and Target account selector rule creation in IT role & other configurations in Role.
- Executed sod policies for application level within tfs environment.
- Integrated various authentication methods including basic authentication, API token, and OAuth2.0 within connector integration process
- Leverage GitHub to manage all artifacts, implementing different versions tailored for development, testing, and production environments.
- Resolved production issues in collaboration with production support team, ensuring timely and effective solutions.
- Coordinated production rollout with the operations team to ensure successful deployment of applications.
- Initiated work on SailPoint ISC, onboarding multiple applications such as Tableau Online and web service, logical AD-based app.
- Act as a SME to provide suggestion/solution to client on any integration or issues and also good team player to work with onsite & offshore resources.
IAM Developer
Tata Consultancy Services (TCS)
Chennai
08.2018 - 05.2020
- Developed applications in OIM using various connector types, enhancing integration capabilities.
- Delimited, JDBC, and web service-based connectors onboarded in OIM.
- Rbac and entitlement-based provisioning strategy executed based on client specifications.
- Executed scheduled jobs in OIM to optimize process flow for enhanced service delivery.
- Conducted unit and integration testing for all onboarded applications internally prior to transitioning applications to higher environment.
- User, Role and Entitlement types of certifications are followed for applications in IAM.
- Established and enforced sod policies.
- Aggregation and correlation process were followed in app integration.
- requirement analysis for application from business.
- GIT code repo was used to store artifacts & migration process was followed based on it.
Developer
Tata Consultancy Services (TCS)
Chennai
03.2017 - 05.2018
- Designed different types of rules in sailpoint to achieve custom solution for application.
- Implemented role-based access control process to enhance security protocols.
- Implemented SoD policies for application to segregate the user access.
- Implemented default role and automated provisioning for specific cases.
- Integrating new applications in sailpoint.
- Various type of application onboarded including dis-connected, AD and JDBC
- Executed deployment process for application migration from lower to higher environment.
Developer
Accenture
Bangalore
03.2016 - 03.2017
- Designed MultiApp connector in Aveksa.
- Designed different types of collector like AC, EC and IDC.
- Implemented custom attribute creation for connector integration.
- Onboarding of applications in Aveksa compliance manager
- Demonstrated strong knowledge in rule creation based on business needs.
- Implemented Segregation of Duties for applications.
- Understood processes for creating single and multi-level reviews for application compliance.
- Creating initial identities for Aveksa environment.
- Collaborated with operations team to resolve support issues in production, ensuring system reliability.
Developer
Accenture
Bangalore
12.2015 - 03.2016
- Executed RBAC process for user provisioning and de-provisioning, ensuring compliance with SoD policy.
- Integrated multiple applications with SailPoint.
- Integration of HR system with SailPoint to create initial identity cubes.
- Led short-term project for SailPoint installation, enhancing identity management capabilities.
- Lifecycle event was established in environment.
IAM Developer
WIPRO Technologies
02.2013 - 12.2015
- Creating identity collector for gathering initial data for Aveksa environment from target system
- Designed unification process for data integration across applications.
- Collected requirements for application onboarding from business stakeholders to ensure alignment with operational needs.
- Onboarded various applications into Aveksa to enhance identity governance capabilities.
- Creating different types of Collectors like Account collectors and Entitlement collectors to fetch the data from target system.
- Created User Access Recertification Campaign/Review as agreed with the business.
- Collaborated on multi-level review process for user access certification.
- Generated and managed recertification processes for joiners, movers, and leavers.
- Served as SME to resolve user and client issues, facilitating smoother operational workflows.
- migrating application metadata between various environments such as dev and Prod.
Education
Bachelor of Engineering - Computer science
Skills
- Identity management
- Role-based access control
- User provisioning
- API integration
- Application onboarding
- Lifecycle event management
- Compliance policies
- Issue troubleshooting
- Project coordination
- Team collaboration
Personal Information
- Gender: Male
- Marital Status: Married
- Ph: +1 (469) 389-7903
Location In Us
Plano, TX
Key Clients
- Lloyds Bank, UK, Banking service
- Morgan Stanley, US, Financial service
- Nordea, Nordic region, Banking service
- United Parcel Service, US, Package delivery system
- Truist (BB&T | Sun Trust), US, Banking service
- Toyota Financial Service, US, Financial service
Visa
H1B - Stamping is valid till DEC, 2026
Timeline
IAM Developer
Tata Consultancy Services (TCS)
08.2018 - 05.2020
Technical Lead
Tata Consultancy Services Limited
03.2017 - Current
Developer
Tata Consultancy Services (TCS)
03.2017 - 05.2018
Developer
Accenture
03.2016 - 03.2017
Developer
Accenture
12.2015 - 03.2016
IAM Developer
WIPRO Technologies
02.2013 - 12.2015