Bikash Bhandari Email & Phone Number

Nashville, Tennessee, United States

• Demonstrated expertise in implementing and managing SailPoint's IdentityIQ (IIQ) solution, specializing in applicationintegration with several downstream systems for VUMC.• Proven track record in mitigating regulatory non-compliance risks by automating compliance processes, life cycle eventsensuring continuous adherence to industry regulations and standards.• Experienced in enhancing identity security and governance capabilities for healthcare organizations, fosteringcollaboration between IT and clinical staff while maintaining high-level security standards to safeguard sensitive patientdata.• Successfully onboarded and integrated 15+ enterprise applications into SailPoint IIQ platform, streamlining accessmanagement processes.• Managed a diverse range of identities, exceeding 110K active users across multiple environments, ensuring efficientprovisioning and deprovisioning.• Led a team in the deployment of SailPoint IIQ, achieving seamless integration with existing IAM systems and minimizingdowntime.• Designed and implemented role-based access controls (RBAC), enhancing security posture, and aligning with industrybest practices.• Conducted thorough system audits and assessments, ensuring compliance with regulatory standards such as GDPR,HIPAA, and SOX.• Optimized performance and scalability of SailPoint IIQ infrastructure, enabling support for rapid business growth andincreased user base.• Collaborated with cross-functional teams to gather requirements, design solutions, and deliver tailored IAM solutionsaligned with organizational objectives.

Fort Washington, Pennsylvania, United States

Analyzed existing IdentityIQ configurations and identified additional technical requirements for SailPoint to propose a tailored solution to migrate to SailPoint IdentityNow.Worked with Active Directory and utilized PowerShell capability to leverage the data required for analysis.Onboarding, Offboarding, LOA, Rehire, sending email notification to manager when hiring, termination, welcome email, resetting password email, managing accounts when user status changed, etc.Worked in creating complex transforms individually to meet the client requirements. Worked with different transform types, mostly first valid, to meet the requirements. Worked with different sources such as Web Service Connector, Active Directory, Flat File, JDBC, Peoplesoft, Git etc. When OOTB connection is not present, I worked on creating a custom connector leveraging the API.Have experience in using API heavily to onboard the web-based applications. Experience in writing a runbook script in Azure AD to connect back and forth with Amazon AWS (Where source information is stored) and SailPoint.Worked in creating rules for JDBC provisioning and deprovisioning based on the SQL queries provided by the DB team.Worked on creating cloud rule whenever transform is not sufficient to meet the client requirements.Experienced in using filters in JSON objects to catch the specific trigger required in workflow.Experienced in working with the SailPoint team opening tickets whenever the solution is out of our hand and need to request SailPoint.Have worked in complex SQL Query and Java programs to meet the client requirements.Utilized different features of SailPoint IdentityNow, including creating, enabling, disabling, locking users, defining password policy, resetting passwords, email template modification, service agreements, and security settings.Worked with password Management as well as certifications to review and provide access.

Plano, Texas, United States

Pioneered the establishment of the SailPoint IdentityNow SaaS environment, collaborating closely with infrastructure, HR, and applications teams to build the system from the ground up.Collaborated with stakeholders to evaluate the existing SailPoint IIQ ecosystem and determine the requirements for transitioning to SailPoint IdentityNow.Conducted a comprehensive analysis of SailPoint IIQ, covering user profiles, lifecycle events, RBAC, SOD policies, access reviews, workflows, and identity governance processes.Developed automation scripts using Ruby and Role Importer to efficiently create access profiles.Applied strong problem-solving skills to troubleshoot and resolve identity errors and duplicate account issues, ensuring system integrity.Executed unoptimized aggregation for AD source through API calls (POSTMAN), monitored source aggregation tasks, and re-ran tasks as needed for accurate data processing.Leveraged various features of SailPoint IdentityNow, including user management, password policies, email templates, API call, and security settings.Collaborated with SailPoint Support to integrate legacy applications and established the SailPoint IdentityNow environment following recommended guidelines.Maintained data precision by mapping user identities, privileges, roles, and policies from SailPoint IIQ to SailPoint IdentityNow.Worked with cross-functional teams to establish birth-right access, ensuring immediate and secure employee access.Implemented a collaborative approach, actively seeking feedback from business units to evolve and mature the identity program in alignment with the company's strategic vision.Facilitated identity governance and access reviews to embrace digital transformation, emphasizing how IdentityNow's cloud-based deployment expedites security and compliance efforts while enhancing productivity.

Responsible for analyzing, designing, coding, testing, and implementing application enhancements in SailPoint IIQ, Garancy IDM. Proficient in configuring Authoritative and Non-Authoritative Applications using connectors like Active Directory, Flat file, JDBC, and Oracle Database in SailPoint IIQ.Thorough understanding of internal technical of SailPoint IIQ, including Role-Based Access Control (RBAC), Governance, and Access Certification.Hands-on experience in upgrading SailPoint from version 7.1 to 7.3.Solid knowledge of Roles, Life Cycle Manager, Policies, and Reports.Installed and configured agents for Active Directory, LDAP, RACF, and Oracle with Garancy IDM.Conducted integrations with various applications, including AD, Exchange, Flat File, and JDBC, connected to Oracle, MySQL, SQL Server, and DB2 databases.Collaborated closely with SailPoint and Garancy product vendors and engineers to design and implement features in Garancy IDM and SailPoint IIQ.Designed and implemented database access provisioning, de-provisioning, and password reset management using SailPoint Identity IQ.Engaged with customers, business analysts, partners, and IT team members to comprehend business requirements, driving the analysis and design of technical solutions.Conducted root cause analyses to identify and resolve intricate problems affecting the ISRM Infrastructure.Independently developed test scenarios based on technical specifications to verify Identity and Access management solutions.Provided application-related troubleshooting services as part of project and post-production support activities, ensuring accurate documentation, and maintaining up-to-date records. Actively participated in User Acceptance Testing (UAT) and contributed to bug-related reengineering efforts, ensuring optimal system performance and user satisfaction.Ensured on-time, within-budget, and scope delivery of ISRM Infrastructure projects by completing project tasks.

Newark, Delaware, United States

Worked as a SailPoint Support Engineer to triage the production issues. Helped the team in addressing access-related production issues, encompassing end user access, debugging, troubleshooting, and server issues and maintenance.Conducted Root Cause Analysis (RCA) for P1, P2, P3 tickets ensuring timely deliverables to customers.Orchestrated access reviews and certifications within SailPoint IIQ, meticulously validating access controls to uphold compliance and security standards.Modified the Leaver Workflow with the changes in Sunset Identity and Sunset Delete Identity workflow and rule libraries. Re-designed the Rehire Workflow.Developed the Identity Trigger Rule and Exclusion Rule for Mover Certification.Rectified null pointer exception issue for role/entitlements with the change in the Field Value Rule.Pruned the old/unnecessary cubes in IIQ from the OOB Task for which a rule was run before pruning to transfer the assigned roles from the old cube to the new cube. Automated the manual work items generated for logical applications with a provisioning rule.Used SQL Query to fetch the required information from the corresponding application and SailPoint table.Email Template Report Development for the daily monitoring of the scheduled tasks/servers and the terminated users.Successfully implemented the Google Workspace connector, including seamless transfer of drive data upon deletion.

San Francisco, California, United States

Designed and developed User interface using Spring MVC, JSP, HTML5, CSS3, Angular and client-side validations using JavaScript/jQuery.Implemented Spring-Core for dependency injection and Spring ORM to integrate hibernate for persistence.Closely worked with Content Management System (CMS) team to fill gaps in interface design.Continuous integration and deployments (CI/CD) done using Jenkins onto AWS environment.Developed Service classes to access Web Services and DAO classes.Utilized various design patterns in the project such as Data Transfer Object, Data Access Object, Template and Singleton.Collaborated with the designer, providing creative input and technical feasibility with React Native.Used SoapUI for web service testing and validation.Implemented RESTful webservices for quote retrieval from the UI.JMS is integrated for asynchronous communication with legacy applications.Implemented JUnit test cases through TDD (Test Driven Development) approach.Experienced with J2EE Design Patterns such as singleton, session facade, DAO, MVC, Multi-Threading and Factory.Made the integration of data in several applications in favor JSON documents with dynamic schemas using MongoDB database.Wrote services to store and retrieve user data from the MongoDB for the application.Experience configuring and extending the Actimize RCM (Enterprise Risk Case Manager) product including developing custom Java plug-ins, Actimize RCM configuration: setting up roles, workflows, users, views using RCM Designer Deployed the microservices/application in Amazon web services (AWS cloud).Involved in configuration and usage of Apache Log4J for logging and debugging purposes.

Lincoln, Nebraska, United States

Involved in understanding and analyzing the requirements of the project.Implemented server-side programs by using Servlet and JSP.Stored the dynamic data on Collection Objects and used the predefined methods to perform all DB related operations.Created and handled Custom-Exceptions that are related to business operations.Created child Threads to improve the performance by running some independent tasks at background.Designed, developed and User Interface using HTML, JavaScript, AJAX, and CSS.Used JavaScript to perform Client-Side Validation.Implemented using the MVC Design Pattern.Used JDBC to interact with the underlying MySQL Database.Deployed Applications on Apache Tomcat Server.Involved in JUnit testing for various components.Used Log4J for any logging purposes during the development of the application.

Master'S Degree, Business Analytics

Bachelor Of Engineering - Be, Computer Engineering