Mohamad Adib Baroud

secureX24 ~X24 Security Red, Blue and Purple Team Partners: •ForgeRock Partner •Omada Partner •CyberArk Partner •Beyond Identity Partner •IBM Partner •Imprivata Partner Services: IDENTITY MANAGEMENT MULTI-FACTOR AUTHENTICATION SINGLE SIGN-ON ACCESS MANAGEMENT IDENTITY GOVERNANCE & ADMINISTRATION PRIVILEGED ACCOUNT MANAGEMENT • Microsoft Partner • AWS partner • Google Partner Expert knowledge in everything Microsoft and a special dedication to IAM (Identity Access Management) Do you need expert advice on implementing Microsoft Teams, SharePoint or Office 365 ? Let's have a chat ! #office365 #microsoft #microsoft365 #microsoftteams #sharepoint #azure #cloud #msftadvocate

IAM Phase 4 – Identity Lifecycle & Role, Attribute, and Policy-Based Access Control Implementation Client: Envalior B.V. | Duration: October 2024 – December 2025 As part of Envalior’s multi-phase Identity & Access Management (IAM) transformation, I led the delivery of Phase 4, focused on completing enterprise-wide Identity Lifecycle Management (ILM) and introducing a unified access governance model combining RBAC, ABAC, and PBAC principles. Key Responsibilities & Achievements: Finalized Joiner–Mover–Leaver (JML) lifecycle automation across all identity types including employees, contractors, vendors, and service accounts. Aligned ILM workflows with HR master systems to ensure consistent provisioning across cloud and on-prem environments. Designed and implemented Role-Based Access Control (RBAC) structures through comprehensive role discovery with business and application owners. Introduced Attribute-Based (ABAC) and Policy-Based (PBAC) access controls leveraging ServiceNow and IAM/IGA integrations. Centralized access governance in ServiceNow, establishing it as the authoritative platform for role, attribute, and policy management. Built automated provisioning workflows for onboarded systems and auditable manual workflows for non-integrated applications. Delivered full documentation packages including ILM validation, RBAC/ABAC/PBAC governance models, role catalogs, and provisioning runbooks. Governance & Delivery: Operated under Agile sprints with bi-weekly demos and stakeholder checkpoints. Collaborated with InfoSec and Cybersecurity teams to define and enforce conditional access policies. Ensured alignment with compliance and audit standards through testing, documentation, and sign-offs by Envalior’s Security & IAM leadership.

IAM Maturity Level Pioneer

Make sure that the right people have access to the information systems for the right reasons. Help with implementation of processes and procedures regarding Identity & Access Management. Contribute to the overall Identity & Access Management proposition. Help translate customer issues into a technical solution and its implementation. Responsible for creating/managing authorization matrix of applications in relationship with Access Control. Onboarding applications. JML processes and procedures.

Setup of IAM department within the Dutch Railway Company to ensure the IAM & PAM proces, procedures and work alignment to be carried out from a centralpoint perspective. By aligning Startetegy to Tactical layer and from Tactical (IGA) to Operational layer (IdM) Drive and contribute to integration and on-boarding of new applications into the central IAM solution, depending on the specific application needs (Identity Management, Access Management, Identity Governance, Privileged Access Management) Drive and contribute to the definition of IAM-related processes (JML) and procedures (IGA) Drive and contribute to the Business/Application role modeling for all applications of the company (starting with critical applications). Prepare the on-boarding of applications into our IAM solution and liaise with our technical team to on-board applications into our IAM system. Lead and review access rights (Authorization Matrices). Responsible for and contribute to the implementation and success of the PAM solution over Iam on Contribute to all IAM business related activities for auditing and reporting purposes Responsibilities Main Duties - Overall Identity and Access Management Monitor Identity and Access Management Best practices and processes for the organization and develop solutions for potential risks - Coordinate, investigate and resolve IAM related incidents. - Analyze, recommend and implement the processes to structurally integrate access rights management into the development and rollout of new applications. - Work closely and proactively with the Technical Team, Team Leaders, service providers and business units to identify IAM related risks and propose technical solutions to IAM related questions. - Identify opportunities to improve business practices or IT related IAM processes. - Improve IAM maturity. Collaborate with the entire organization to move from Logical Access Security to improve overall maturity around all IAM related capabilities

• Set up IAM Service JML & PAM in OneIdentity from Quest • Stakeholder Management • Set up and implement JML process • SOC/SIEM process monitoring • Application connection service to IAM process • Set up and manage RBAC/ABAC role model • Align IAM to ITIL and APM, CMDB

IAM & PAM Architect(Identity Access Management & Privileged Access Management) - IAM project plan written and approved by management - IAM process improvements discussed with HR department and policy document created with the processes - Email address policy introduced - Surname policy agreed - Cleaning of old information in the Active Directory with HR system leading the way - Azure Active Directory equipped to handle all agreed changes - Exchange configuration for email addresses policy based on SMTP records SharePoint migration specialist - Draw up a migration plan - Public unless policy document submitted - IST-SOLL document delivered - Organizational structure document documented and implemented, organization, departments and new teams included - SharePoint migration prepared, tested and executed in a migration weekend - Fileshare migration also included on the new SharePoint structure - Adoption plan written and executed in accordance with ADKAR method Intune Consultant / Modern Workplace Consultant - Layout for the current devices and newly purchased devices, also advised on BYOD - BYOD policies set up - Windows 10 workstations implemented SharePoint Consultant - Project plan written - Pilot organization set up with SCRUM master - Microsoft Teams set up - SharePoint Online set up - Microsoft Teams Provisioning Explained and Implemented Microsoft Teams Consultant and Technical Trainer - Established SCRUM team, we have set up the support desk both first and second line in order to be able to properly support the user organization through a built-up FAQ. - Technical Training of Teams delivered Microsoft Teams Consultant - Prepare Microsoft Teams environment - Microsoft Teams implementation done - Microsoft Teams Adoption Done Microsoft Exchange Consultant - Microsoft 365 Consultant / Project Leader - Exchange migration Microsoft Teams and SharePoint Consultant - Microsoft Teams - SharePoint design - IAM policy advice Microsoft Exchange Consultant