Home

Mahipal Reddy - IAM Consultant

sudheshna@atxtechnologycorp.com

Location: New Haven, Connecticut, USA

Relocation: YES

Visa: H1B

Results-driven IAM Engineer with 8 years of experience delivering enterprise Identity Governance, Privileged Access Management, and Cloud Identity solutions across U.S. and global environments. Proven expertise in SailPoint IdentityNow, Saviynt. ForgeRock, Microsoft Entra ID, CyberArk, Okta, and Ping Identity, driving Zero Trust access controls and automating JML workflows to reduce provisioning time by 70%. Strong background in RBAC/ABAC design, compliance (SOX, HIPAA, GDPR), and large-scale IAM integrations. Recognized for strengthening security posture, reducing identity risk, and optimizing authentication performance across complex enterprise ecosystems. Technical Skills Identity Governance & Administration (IGA): SailPoint IdentityNow, Saviynt, Identity Lifecycle Management, Joiner Mover Leaver (JML) Automation, Access Certifications, Access Governance, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Access Request Workflows, Compliance Management (SOX, HIPAA, GDPR) Cloud Identity & Directory Services: Microsoft Entra ID (Azure Active Directory), Active Directory (On-Prem), Azure AD Connect, ADFS, PingDirectory (PingDS), Hybrid Identity Architecture, LDAP Privileged Access Management (PAM): CyberArk Privilege Cloud, CyberArk Defender, Privileged Account Onboarding, Safe Management, Credential Rotation, Privileged Session Monitoring (PSM), Secrets Management Authentication & Federation: Okta, PingFederate, PingAccess (PingAM), ForgeRock Identity Platform, Single Sign-On (SSO), Multi-Factor Authentication (MFA), SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, Federation Services Security & Zero Trust: Zero Trust Architecture, Conditional Access Policies, Identity Risk Mitigation, Access Reviews, Policy-Based Access Control, Least Privilege Enforcement Automation & Integration: PowerShell, Python, REST APIs, SOAP APIs, JSON, JWT, Workflow Automation, Custom IAM Integrations, ServiceNow Integration Compliance & Governance: SOX Compliance, HIPAA Compliance, GDPR Compliance, Audit Support, Identity Audit Reporting, Governance Controls Professional Experience USAA (Financial) Senior IAM Engineer | USA | April 2026 Present Managed day-to-day Workforce Identity and Access Management (WIAM) onboarding activities, ensuring timely account creation and access provisioning for employees, contractors, and vendors across enterprise applications. Processed identity lifecycle requests including new hire onboarding, role modifications, transfers, and offboarding while maintaining compliance with organizational access governance policies. Provisioned and managed user accounts in SailPoint, Microsoft Entra ID (Azure AD), Active Directory, and Okta, ensuring accurate role assignments and access based on approved business requests. Performed identity validation, access verification, and entitlement reviews to ensure users received appropriate access in accordance with RBAC and least-privilege principles. Supported privileged account onboarding activities in CyberArk, including privileged account enrollment, safe membership updates, and access request validation for administrative users. Investigated and resolved identity provisioning failures, account synchronization issues, authentication errors, and access-related incidents by coordinating with application owners and infrastructure teams. Executed bulk user onboarding, access modification, and account maintenance activities using IAM tools, reducing turnaround time while consistently meeting SLA commitments. Maintained detailed documentation of onboarding procedures, access requests, and operational runbooks, while supporting audit evidence collection and ensuring adherence to security and compliance standards. Subway IAM Engineer / Specialist | USA | Jan 2025 March 2026 Lead enterprise-wide implementation and optimization of SailPoint IdentityNow (IGA), governing identity lifecycle, provisioning, and certifications across 150+ enterprise applications in a cloud-first environment. Architected and automated end-to-end Joiner-Mover-Leaver (JML) workflows integrating SailPoint, Microsoft Entra ID (Azure AD), Active Directory, and ServiceNow reducing manual provisioning effort by 70% and accelerating onboarding SLAs. Designed and enforced enterprise RBAC framework aligned with least-privilege and Zero Trust principles, reducing entitlement sprawl and improving access accuracy across business units. Directed quarterly SOX and HIPAA access certification campaigns with 98%+ completion rate, minimizing audit findings and improving governance maturity. Implemented and administered CyberArk Privileged Access Management (PAM) for 200+ privileged accounts, configuring safes, automated credential rotation, and PSM session monitoring reducing privileged access risk exposure. Administered Okta SSO and MFA integrations, onboarding enterprise applications using SAML, OAuth 2.0, and OIDC; reduced authentication-related incidents by 45%. Developed automation scripts using PowerShell and Python to support AD lifecycle management, compliance reporting, API integrations, and provisioning reconciliation. Configured and maintained PingDirectory (PingDS) for high-availability LDAP infrastructure supporting scalable identity resolution. Implemented attribute-based access control (ABAC) policies via PingAccess Manager (PingAM), enabling context-aware authorization based on user role, device posture, and environmental risk. Collaborated with security, audit, and application teams to strengthen IAM governance posture and align identity strategy with Zero Trust architecture. Cognizant Technology Solutions IAM Engineer / Analyst | Hyderabad, India | Oct 2019 July 2023 Administered hybrid identity infrastructure supporting enterprise environments using Microsoft Entra ID (Azure AD) and on-prem Active Directory, including Azure AD Connect synchronization and ADFS federation. Implemented SSO and MFA solutions using Entra ID, Ping Identity, and NPS, strengthening authentication security for internal and external-facing applications. Onboarded 100+ enterprise applications using SAML, OAuth 2.0, OpenID Connect, and SCIM provisioning, ensuring secure federated identity integration. Engineered custom identity workflows within ForgeRock Identity Platform, enabling automated provisioning, reconciliation, and dynamic lifecycle state management. Automated identity provisioning, deprovisioning, and attribute synchronization using PowerShell and Python, improving lifecycle accuracy and reducing manual intervention. Integrated IAM platforms with HRMS, ERP, CRM, VPN, VDI, and CyberArk systems to centralize identity governance and streamline access controls. Led enterprise MFA migration initiatives for customer-facing applications, reducing account compromise risks and improving compliance posture. Configured and maintained CyberArk PAM, managing safe creation, credential rotation policies, and session monitoring to secure privileged access. Conducted access certification campaigns and enforced RBAC policies in alignment with SOX, HIPAA, and GDPR compliance requirements. Troubleshot complex federation and token-based authentication issues using REST/SOAP APIs, logs, SAML tracers, and JWT diagnostics to maintain high authentication uptime. Partnered with security and business stakeholders to align IAM initiatives with corporate security frameworks and best practices. Value Point Systems Pvt Ltd IAM Administrator | Bangalore, India | Aug 2017 Sep 2019 Engineered federated authentication solutions using PingFederate, Microsoft Entra ID, and ADFS, enabling secure SAML/OAuth/OIDC integrations across enterprise applications. Implemented and supported Multi-Factor Authentication (PingID & Azure MFA), significantly strengthening identity assurance controls. Managed complete identity lifecycle processes including automated provisioning, deprovisioning, and access reviews to prevent access creep. Strengthened governance by implementing Saviynt SoD controls, risk analytics, and certification campaigns to improve audit readiness and reduce access violations. Designed and enforced RBAC and ABAC models to maintain structured, policy-driven access governance aligned with least-privilege principles. Developed automation scripts in PowerShell and Python to streamline identity operations, monitor directory health, and maintain role consistency. Maintained identity synchronization between on-prem AD and Entra ID environments, ensuring directory integrity and secure hybrid access. Conducted IAM security assessments and participated in risk analysis initiatives to identify and remediate identity vulnerabilities. Maintained IAM audit logs, compliance documentation, and reporting aligned with NIST, ISO 27001, and GDPR frameworks. Provided L2/L3 support for federation, directory synchronization, and authentication incidents to ensure uninterrupted IAM services. Educations Webster University Missouri, USA Master of Science (M.S.) in Computer & Information Technology Management | December 2024 Teegala Krishna Reddy Engineering College Hyderabad, India Bachelor of Technology (B. Tech) in Electronics and Communication Engineering | June 2017 Certifications SailPoint Certified Implementation Engineer Okta Certified Administrator CyberArk Defender Keywords: active directory Idaho