Work with the business and SailPoint services teams in designing and implementing the IGA migration solution to migrate SailPoint IdentityIQ to Identity Security Cloud.Design solutions to on-board employees, contractors and other personnel from health care providers acquired by CommonSpirit.Onboard authoritative and non-authoritative sources, design correlation, manager correlation, attribute generator cloud rules.Develop transforms to manipulate data in promoting them to Identity attributes. Design roles, setup access request processes for managed and unmanaged systems.Design and setup general policies and SOD policies.Setup certification campaigns to support auditing and compliance requirements. Design workflows, work items and rules to support Joiner, mover, leaver processes.Maintain the current IdentityIQ environment in both Dev and Prod environments.Lead system integrations for both internal facing and external facing systems/applications with SailPoint IdentityIQ.Design test cases to perform unit tests, Quality Assurance and postproduction smoke tests. Design custom connectors within SailPoint IdentityIQ using Java, Beanshell and other related technologies.Ensure Audit and other requested information is provided within a timely manner.Work with Rest Web services, SAML 2.0, OAuth, WS-Security, Public Key Infrastructure (PKI) and other authentication/authorization protocols.Address SSL certificate related communication issues and write complex queries to work with databases.

Gather requirements and design a complete IGA rollout solution to address the company’s IGA goals.Work with source owners to understand the data structure, provisioning rules and limitations.Architect initial infrastructure (virtual appliances, IQService) and connect to IdentityNow tenants. Troubleshoot connectivity issues.Develop on-boarding plans for authoritative and non-authoritative sources.Design Identity profiles, transforms, identity lifecycle states for employees, contractors and vendors.Setup SSO via Okta, break-glass accounts and password policies.Write attribute generator, correlation, before provisioning cloud rules and connector rules to work with different SailPoint connectors.Design the life cycle management workflows for joiner, mover and leaver scenarios to work with all connected and disconnected sources.Work with custom SCIM connectors, write PowerShell scripts to interact with Active Directory.Work with Rest Web services, Oauth 2.0, Public Key Infrastructure (PKI) and other authentication/authorization protocols.Deployment of File Access Manager application on Azure and work with SharePoint Online, Exchange Online, OneDrive and other Microsoft 365 applications.Work on FAM connectors to onboard Active Directory, File Servers, DFS, Exchange, SharePoint, Microsoft 365 applications and SQL Server.Write complex SQL queries to pull data related to permissions and activities from FAM database and Elastisearch.

Work with teams in designing a complete IAG solution using a combination of SailPoint products (IdentityIQ, File Access Manager)Gather requirements, conduct high level analysis and documentation.Architect initial infrastructure, on-boarding of applications, role-based access controls, policy and password management, certifications, workflows, work items and rules.Thorough understanding of Lifecycle Manager, Compliance Manager, Access Request, Automated Provisioning Password ManagementLead system integrations for both internal facing and external facing systems/applications with SailPoint IdentityIQ.Work with Application Teams to identify, aggregate and correlate Application/System User Accounts to Identity Cubes within SailPoint.Development and configuration of SailPoint various modules (Audit, compliance, lifecycle, service account)Design, Test and Troubleshoot Custom System/Application Connectors within SailPoint IdentityIQ using Java, Beanshell and other related technologies.Ensure Audit and other requested information is provided within a timely manner.Work on RBAC, Identity Policies, Identity Lifecycle automation and reporting, Password Policies, Separation of duties, User Provisioning, and approval workflows in SailPoint IIQ.Install File Access Manager application in different environments and connect to applications. Run permission and data classification scans.Connect SailPoint FAM to Active Directory, File Servers, EMC Devices, SharePoint Online, OneDrive, Exchange Online and other NAS devices.Write complex queries on MS SQL Server to support audit requirements.Integrate IdentityIQ with File Access Manager and pull permissions data associated to Entitlements.Configure certification campaigns in both IdentityIQ and File Access Manager. Troubleshoot issues and work with reviewers to complete action items.

Review the current environment. Plan & design the migration from ISIM to FIM.Address technical and design issues in data replication between 14 LDAP servers.Design and execute the migration of Baker Hughes customer portal (BHD) to the new enterprise portal (EPP).Design a data backup and recovery strategy to ensure high availability of directory data and to recover critical data from loss or corruption.Evaluate multiple directory management tools namely OpenDJ, Microsoft ADLDS and Radiant Logic to replace TDS with a cost effective and reliable directory service and reduce the cost of directory information management.De-commission Identity management for Internal Users (Employees and Contractors) from ITIM including TAM WebSeal, AD reverse password sync.Enhance the global password policy to remove the current system’s vulnerability towards password guessing.Address design issues in the integration of Baker Hughes customer portal with ITIM.Design a purge strategy in ITIM ensuring that ITIM can efficiently work on usable data.Deploy new changes and provide application support as needed.

Deploy a Highly Available architecture and address multiple single point failures in the current design.Propose a re-design to remove the complexity in password synchronization and user provisioning to external systems.Re-design TDI Assembly Lines to efficiently perform data transformation and transfer.Address data replication issues between ISIM managed systems.Enhance ISIM workflows to efficiently handle user operations.Setup ISIM based RESTful Webservices to integrate with the secondary ISIM installation.Setup change management, configuration management, status reporting processes and templates.

Configure and maintain IDM System components, including life cycle operations, provisioning policies, services, email templates and lifecycle rules.Design, develop and deploy custom java web applications that interact with ISIM to provide supplemental and permanent SAP access to users.Design and execute scripts and extensions to interact with ISIM to provision access to SAP NetWeaver & GRC.Schedule releases and co-ordinate delivery along with providing technical support to the team onsite & offsite.Design the solution to automate provisioning of customers to custom applications built on SAP.Implement provisioning of Lync access using Postscript feature of AD adapter.Manage SSL certificates by issuing certificates and importing new certificates as and when applicable.Apply fix packs to various IAM components including upgrading of SAP NetWeaver adapter.Address critical implementation issues related to various components of ISIM like Request Dispatcher and data replication.