IAM & Security Engineer specialist with Ping/Okta

LATHA PAMARTHI

*****.****@*****.*** 201-***-****

IAM & SECURITY ENGINEER (PING IDENTITY OKTA CLOUD IAM PRODUCTION SUPPORT)

IAM & Security Engineer with 8+ years of experience designing, implementing, and supporting enterprise identity and access management solutions across cloud and hybrid environments. Strong expertise in SSO (SAML, OAuth2, OIDC), IAM platforms (Ping Identity and Okta exposure), and Linux-based systems, with growing experience in cloud IAM (AWS).

Proven ability to operate IAM platforms at scale, improve access controls using RBAC and least-privilege principles, and support compliance initiatives through monitoring, incident response, and automation. Experienced in integrating IAM systems, managing identity lifecycle processes, and supporting secure authentication for workforce and application identities.

CORE COMPETENCIES

Identity & Access Management (IAM) Engineering

SSO, Federation & MFA (SAML, OAuth2, OpenID Connect)

Okta (Workforce Identity – Exposure / Integration Knowledge)

Cloud IAM: AWS IAM, Microsoft Entra ID (Azure AD)

Ping Identity (PingFederate, Ping Access, Ping Directory)

RBAC, Least Privilege & Access Governance

Identity Lifecycle (Provisioning / Deprovisioning / Access Changes)

Linux Administration & Troubleshooting

PKI, Certificates & Secrets Management

Observability & Monitoring (Splunk – transferable to Datadog)

Automation & Scripting (Bash, Perl; exposure to Python)

Incident Response, RCA & ITIL Processes

Security & Compliance (Audit Support, Risk Mitigation)

TECHNICAL SKILLS

IAM & SSO Platforms:

PingFederate, Ping Access, Ping Directory, SiteMinder,

Okta (SSO, MFA, application integrations – working knowledge),

Microsoft Entra ID (Azure AD)

Cloud & Identity:

AWS IAM (hands-on exposure), Azure AD, Active Directory

Protocols & Security:

SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, PKI, SSL/TLS

Operating Systems:

Linux (Red Hat, CentOS), Solaris

Monitoring & Observability:

Splunk

Automation & Tools:

Bash, Perl, OpenSSL (working knowledge of Python concepts)

Web & App Servers:

Apache, Tomcat, IIS, WebSphere

PROFESSIONAL EXPERIENCE

CVS Health

Senior IAM Engineer – Ping Identity / Production Support

Jan 2021 – Nov 2025

Operated and enhanced enterprise IAM platforms (PingFederate, Ping Access, Ping Directory) supporting secure, scalable authentication and access management.

Implemented SSO integrations using SAML, OAuth2, and OpenID Connect for internal and third-party applications.

Collaborated on integrations with modern IAM platforms including Okta and Azure AD for workforce identity and SSO enablement.

Designed and maintained authentication policies, adapters, and token mappings aligned with least-privilege and RBAC principles.

Provided L2/L3 support for IAM production systems, resolving authentication and access issues.

Supported identity lifecycle processes including onboarding, access changes, and deprovisioning.

Utilized Linux and Splunk to monitor IAM activity and support incident investigations.

Performed root cause analysis (RCA) and implemented fixes to improve IAM reliability and security posture.

Managed PKI, certificates, and keystores ensuring secure communication.

Collaborated with cloud and security teams to support IAM integrations with AWS and Azure AD.

Participated in disaster recovery (DR) testing and maintained IAM runbooks and documentation.

Bank of America

Security Engineer – IAM Migration (SiteMinder to Ping Identity)

Sep 2019 – Aug 2020

Supported large-scale IAM modernization migrating ~1500 applications to modern federation platforms.

Implemented SSO integrations using SAML, OAuth2, and OIDC with secure authentication flows.

Designed RBAC-aligned access policies and federation configurations to meet application security requirements.

Partnered with application and security teams to onboard applications and resolve authentication issues.

Validated certificates, encryption, and trust relationships to ensure secure migrations.

Supported post-migration stabilization, monitoring, and issue resolution in production environments.

American Airlines

IAM Engineer – SiteMinder / LDAP

Apr 2016 – Oct 2019

Supported enterprise SSO and IAM infrastructure using SiteMinder and LDAP.

Optimized authentication flows and improved access reliability across applications.

Assisted in directory integrations and SAML-based federation implementations.

Collaborated with cross-functional teams to resolve access and identity issues.

Citi Bank (Contract)

IAM Engineer – SiteMinder / LDAP

Feb 2015 – Jan 2016

Upgraded SiteMinder environments and supported LDAP infrastructure on Solaris.

Performed directory tuning, backup/recovery, and system monitoring.

Provided 24x7 production support for critical IAM systems.

EDUCATION

Bachelor’s Degree in Engineering

Hyderabad, India

Contact this candidate