About me

I am an Identity and Access Management (IAM) Engineer specializing in cloud and hybrid identity security, authentication, and access governance. With a background in security engineering, I design and automate identity controls across Microsoft Entra ID, AWS IAM, Keycloak, and directory systems. My work focuses on building reliable SSO federation, least-privilege authorization, and automated lifecycle workflows that eliminate access drift and improve security posture.

Capabilities & Focus

  • Enterprise SSO & Federation

    OAuth 2.0, OIDC, SAML 2.0, Keycloak, and Microsoft Entra ID integration with PKCE and token management.

  • Identity Lifecycle Automation

    Joiner-Mover-Leaver workflows, SCIM 2.0 directory sync, and automated access provisioning engines.

  • Access Governance & Least Privilege

    RBAC/ABAC authorization modeling, access review automation, and entitlement drift detection.

  • Cloud IAM & Security

    AWS IAM policy design, Conditional Access, MFA deployment, and identity threat detection.

Engineering Principles

  • Identity Is the Control Plane

    Every access decision starts with identity. Authentication, authorization, and lifecycle governance form the core security boundary.

  • Least Privilege Is a Process

    Least privilege requires continuous validation against actual access needs, eliminating over-privileged roles and entitlement drift.

  • Automate the Lifecycle

    Manual provisioning causes drift and delay. Automation connects source-of-truth systems to directories with dry-run modes and audit logs.

  • Defender Mindset

    Security background informs how identity controls fail: token replay, group escalation, and MFA fatigue.

Resume

Specialization & Experience

  1. Identity & Access Management Engineering

    Active Focus

    Designing and automating cloud & hybrid identity controls across Entra ID, AWS IAM, Keycloak, Samba AD, and OpenLDAP.

  2. Identity Automation & Governance Tooling

    Engineering Development

    Building automation in Python, PowerShell, and Bash for Joiner-Mover-Leaver workflows, SCIM 2.0 provisioning, and access drift detection.

Technical Skills

  • Identity & Access Management (Entra ID, AWS IAM, Keycloak)
    90%
  • Authentication Protocols (OAuth 2.0, OIDC, SAML 2.0)
    88%
  • Identity Automation (Python, PowerShell, Bash, REST APIs)
    92%
  • Directory Services (OpenLDAP, Samba AD, SCIM 2.0)
    85%

Blog & Articles

Contact

Contact Form