IAM & PAM Security Automation Engineer

SANDEEP YADAV PARIKA

Ashburn, VA ************@*****.*** +1-732-***-**** LinkedIn

PROFESSIONAL SUMMARY

Experienced Identity & Access Management (IAM) and Privileged Access Management (PAM) Engineer with over 10 years in information security, access governance, and risk management across financial and healthcare sectors. Proven record in CyberArk administration, access lifecycle automation, SOX/ITGC compliance, and integration of PAM with IAM platforms like SailPoint, Entra ID, and ServiceNow. Adept at designing least privilege strategies, automating security workflows, and supporting zero trust architecture initiatives. Holds CISA, PMP, ITIL, AZ-900, and CSM certifications.

CORE COMPETENCIES

Privileged Access Management (PAM): Skilled in implementing, configuring, and maintaining PAM solutions to secure privileged accounts, enforce least privilege, and manage secrets lifecycle.

Identity Governance & Administration (IGA): Experienced in managing identity lifecycle processes, access certifications, and role-based access models to ensure compliance and operational efficiency.

CyberArk, BeyondTrust, Thycotic, Entra ID: Hands-on experience in deploying and administering leading PAM and IAM tools to protect privileged credentials and streamline access control.

Secrets Management & Credential Vaulting: Expertise in safeguarding sensitive credentials through secure vaults, automated rotations, and API-based integrations.

Role-Based Access Control (RBAC): Strong understanding of designing and enforcing RBAC frameworks to align with organizational policies and compliance requirements.

ITGC / SOX Compliance Audits: Deep knowledge of IT General Controls and SOX audit requirements, with experience supporting access control testing, remediation, and evidence collection.

Zero Trust & Least Privilege Enforcement: Advocates for Zero Trust principles by implementing strict access boundaries, continuous monitoring, and just-in-time privilege elevation.

Cloud Integration (Azure): Skilled in integrating PAM and IAM solutions with major cloud platforms for hybrid identity management and access control.

ServiceNow, SailPoint, RSA Integration: Experienced in connecting PAM solutions with enterprise identity and ITSM platforms to enable workflow automation and access governance.

Security Operations & Risk Management: Strong foundation in monitoring, incident response, and risk mitigation practices to safeguard information assets.

Automation & Continuous Improvement: Focused on improving operational efficiency through process automation, continuous monitoring, and proactive risk reduction strategies.

CERTIFICATIONS

Google Cloud Fundamentals: Core Infrastructure (Google Cloud Security) Jun 2025

Certified Information Systems Auditor (CISA) Dec 2023

Azure Fundamentals AZ–900 – Microsoft. Dec 2022

CyberArk Certified Trustee – CyberArk Nov 2022

Certified ScrumMaster (CSM) – Scrum Alliance. Nov 2022

Project Management Professional (PMP) – Project Management Institute. Mar 2020

ITIL® Foundation Certificate (ITILF) – EXIN. Oct 2014

PROFESSIONAL EXPERIENCE

IAM Engineer – Identity Governance & SOX Controls – Contract

Centene Corporation, Remote Sep 2024 – Apr 2025

Ensured IAM governance structures adhered to policies, standards, and regulatory controls, aligning IAM core capabilities, operations, and application integrations.

Led ongoing access attestations and entitlement reviews, proactively identifying and remediating access violations across business and ISD stakeholders.

Onboarded new enterprise applications with SailPoint, OIDC, SAML, and OAuth2.0 protocols, ensuring secure authentication and seamless integration.

Provided advanced troubleshooting for Active Directory user, group, and authentication issues, including password synchronization failures, stale objects, replication inconsistencies, and nested group misconfigurations.

Troubleshot authentication and access failures caused by misconfigured group policies, conditional access conflicts, or expired service accounts.

Engaged business and technical stakeholders to transition to new IAM services across Access Management, Identity Lifecycle, and Privileged Access Management.

Supported managers in evaluating appropriate access for both standard and privileged users, providing guidance on risk remediation and policy enforcement.

IAM & SOX – GRC Consultant – Contract

Microsoft, Remote Jul 2021 – Sep 2024

Led SOX ITGC testing (Access, Change Management, Operations) across Microsoft Azure and Entra ID environments.

Collaborated with internal and external auditors during walkthroughs, audit planning, testing, and remediation.

Maintained and updated Risk Control Matrices (RCMs), control documentation, and audit logs in GRC tools.

Automated access reviews and conducted daily Elevated Access Reports (EARs) for SOX and ISO 27001 compliance.

Implemented hybrid identity solutions with AD Connect / Entra Connect to ensure consistent synchronization of users, groups, and attributes between on-prem Active Directory and Microsoft Entra ID, supporting SOX-compliant access provisioning and de-provisioning controls.

Conducted risk analysis, audit control testing, and compliance assessments to meet SOX and internal audit requirements.

Developed dashboards and metrics to track access hygiene, compliance posture, and remediation efforts.

Collaborated across business units to identify process gaps, benchmark IAM practices, and drive continuous improvement.

Hardened Entra ID configurations by enforcing Zero Trust principles, conditional access policies, and continuous security monitoring, strengthening identity governance and reducing the risk of unauthorized access in alignment with SOX and ITGC requirements.

Supported integration of AI-based access monitoring and policy enforcement using Microsoft security tools.

IT Security Analyst II – SOX Compliance & IAM

Black Knight Inc., India Mar 2019 – Jul 2021

Performed SAP-specific audit controls testing including SoD, transaction-level control reviews, and automated control validations.

Conducted ITGC testing across network, infrastructure, and application layers.

Participated in SOX walkthroughs and control design assessments with application owners.

Documented audit procedures, control findings, and evidence in alignment with IIA and SOX standards.

Improved compliance posture by reducing aged access violations, through enhanced attestation processes.

Standardized IAM lifecycle workflows, cutting manual effort via automation.

Successfully transitioned applications to new IAM capabilities, ensuring compliance with SOX and internal policies.

Collaborated with stakeholders to remediate control gaps and monitor open audit items.

Technical Solutions Representative

DXC Technology, New Zealand Aug 2016 – May 2018

Delivered Tier 1/2 technical support to Fonterra employees, resolving IT incidents and service requests through ServiceNow and HP Service Manager (HPSM).

Supported and configured Fonterra-issued hardware (Windows laptops, mobile devices, Android/iOS), managing account-level operations via Microsoft Active Directory.

Applied Role-Based Access Control (RBAC) principles to manage secure access aligned with enterprise role definitions.

Liaised with third-party vendors (Datacom, Fujitsu, Spark) for escalated technical issues, ensuring SLA adherence and service continuity.

Monitored compliance tickets and incidents related to New Zealand government accounts (MBIE, DIA, MSD, NZ Police) and supported periodic audit reviews.

Generated incident trend reports and performance metrics using Excel, supporting service quality improvement initiatives.

ICT Student Support Assistant Technician

Auckland University of Technology, New Zealand Jan 2016 – Apr 2016

Delivered front-line IT support to students and faculty, resolving computer lab issues, reimaging devices, and restoring critical user data.

Assisted backup/recovery procedures for student systems and labs, minimizing data loss risks.

Provided dual support to Service Desk and Remote Desktop operations, enhancing coverage and reducing response time.

Ensured end-to-end ownership of issues, contributing to improved resolution SLAs.

IT Support Specialist

NZME (via Lexel Systems), New Zealand Nov 2015 – Feb 2016

Delivered hardware/software support across NZME’s internal operations, including office equipment moves and workstation deployments.

Installed and troubleshot Follow-Me printing solutions across multiple print servers.

Supported escalated IT service requests, managing device relocations, and account setup across user teams.

Associate IT Security Analyst – IAM & GRC

UnitedHealth Group (Optum), India Aug 2013 – Nov 2014

Maintained IBM ISIM/IGI environments, handling user lifecycle provisioning, entitlement management, and de-provisioning workflows.

Diagnosed SSO/federation issues (e.g., SAML, ISAM junctions), resolved web service failures impacting identity propagation.

Executed SoD policy validations and supported feed file ingestion from HRMS systems, ensuring identity integrity.

Improved provisioning flows through approval workflow modifications, mapping fixes, and orphaned role remediation.

Created test accounts and ran lifecycle simulations to validate provisioning logic across UAT and lower environments.

Developed and maintained runbooks, SOPs, and audit documentation for identity platforms and SSO integrations.

Participated in weekly review sessions, presenting SLAs, audit exceptions, and provisioning success metrics.

IT Security Analyst – IAM & Compliance

HSBC EDPI, India Aug 2010 – Aug 2013

Supported enterprise IAM tools including IBM ISIM, IGI, ISAM, and TFIM, managing authentication failures, sync errors, and integration issues.

Handled provisioning failures, stale attribute remediations, and entitlement inconsistencies within global IAM systems.

Supported TFIM SSO policy configuration and federation testing, ensuring availability of secure access across HSBC global regions.

Created custom feed files from HRMS (SuccessFactors) and managed connector syncs to downstream systems.

Oversaw bulk onboarding/offboarding operations for UAT and project migrations in lower environments.

Coordinated with compliance and risk teams during business continuity testing and disaster recovery validation.

Owned ticket queues for new access, entitlements, and escalation workflows, ensuring timely response and compliance adherence.

EDUCATION

Diploma of Education in Computer and Information Sciences and Support Services

Whitireia Community Polytechnic, Auckland, New Zealand.

Bachelor of Technology in Computer Science and Engineering

Jawaharlal Nehru Technological University, Hyderabad, India.

School in CBSE – Central Board of Secondary Education

Kendriya Vidyalaya, Hyderabad, India.

VOLUNTEERING

FIFA World Cup 2026 – USA

Minor League Cricket 2025 – USA

Cricket Umpire – USA Cricket 2024 – Present.

FIFA Club World Cup 2025 – USA.

ICC Level 1 Cricket Umpire – 2024

ICC Level 1 Cricket Coach – 2024

Cricket Umpire – Auckland, New Zealand 2016 – 2019.

Regional Level – Developing Umpire – New Zealand Cricket Association.

ICC Cricket World Cup, Auckland, New Zealand 2015.

Contact this candidate