Shivam Tiwari

Working on IAM delivery across 3 client accounts (2 on Microsoft Entra ID, 1 on Okta); serve as escalation point for critical case

resolutions (CRs) across the portfolio.

Microsoft Entra ID (2 accounts)

• Own end-to-end identity operations, including user and group lifecycle management and role assignment, across enterprise

environments.

• Manage Identity Governance (IGA) via Lifecycle Workflows, automating joiner-mover-leaver actions triggered by pre-hire, onboarding,

role-change, and termination events.

• Configure and support SSO/federation using SAML, OIDC, and OAuth; manage application registrations, Enterprise Applications, API

permissions, and app roles.

• Implement SCIM-based automatic user provisioning for enterprise and SaaS applications.

• Design and administer Conditional Access Policies, Administrative Units, and custom domain configurations.

• Monitor and remediate Risky Users and Risky Sign-ins through Identity Protection.

• Administer hybrid identity end-to-end, including Azure AD Connect and Cloud Sync health, Password Hash Sync (PHS), and Pass-Through

Authentication (PTA).

Okta (1 account)

Managed user accounts, permissions, and role assignments in Azure Active Directory, including group management and external

identities (B2B/B2C).

• Ensured directory synchronization health using Azure AD Connect, Cloud Sync, and Password Hash Sync (PHS).

• Provisioned HR applications with writeback capabilities, including Workday, SuccessFactors, LinkedIn, and AWS.

• Managed Azure Key Vault access (public and private) and configured SSPR and Password Writeback alongside AD Connect.

• Administered on-prem and cloud Active Directory services; supported Okta integration for authentication and identity lifecycle

management.

• Managed provisioning and deprovisioning of gallery and non-gallery apps, including Okta, Workday, SailPoint, Oracle, and AWS.

• Automated AVD and VM operations using Azure Logic Apps based on scaling metrics.

• Ran Entitlement Management, Access Packages, and Access Reviews as part of Joiner-Mover IGA processes.

• Conducted Proof of Concepts (POCs) and resolved client-specific technical issues; performed hard and soft match for user

synchronization.

• Delivered IAM process training for new employees and maintained documentation for roles, access policies, and audits.

Managed provisioning and deprovisioning workflows in Azure Active Directory in alignment with IAM policies.

• Conducted periodic access reviews and audits to ensure compliance and prevent unauthorized access.

• Led migration from AWS to Azure, migrating 5 VMs using Azure Migrate.

Sep 2021 - May 2024

• Created and maintained detailed documentation for security roles, access policies, and audit trails.

• Collaborated with HR, IT, Compliance, and Security Operations teams on audit support, risk mitigation, and security monitoring in

Microsoft Entra ID.

• Integrated and managed SSO, MFA, and IAM tools to strengthen authentication and access control.

• Supported cloud migration and management across Azure, AWS, and Oracle Cloud environments.

• Provided technical support for Azure services including VMs, VNets, VPNs, NSGs, AD Connect, and Entra ID.

Managed users, groups, licenses, and mailboxes in Azure Active Directory and Exchange Admin Center.

• Managed server configurations, cloning, and imaging for rapid deployment.

Dec 2018 - Aug 2021

• Conducted IT audits for client networks and systems, including surprise and quality audits, with detailed improvement reports.

• Provisioned user access per approvals and maintained hardware and network infrastructure.

• Captured recordings and technical documentation to support audit requirements.