Navya .

Senior IAM/Okta Engineer @ American Airlines

About

I am a dedicated IAM (Identity and Access Management) professional with over 9 years of experience in designing, implementing, and managing secure identity solutions for large enterprises. My expertise includes working with leading IAM tools such as PingFederate, SailPoint, Okta, Azure AD B2C/B2B, ForgeRock, and Auth0 to deliver secure, scalable, and user-friendly identity platforms. I have successfully led projects involving Single Sign-On (SSO), Multi-Factor Authentication (MFA), role-based access control (RBAC), user lifecycle management, and access governance, helping organizations improve security and meet compliance requirements. I specialize in integrating IAM with cloud platforms such as AWS, Azure, and GCP, and automating identity processes to reduce manual effort and operational risk. I have hands-on experience with identity federation, OAuth2, SAML, OIDC protocols, and implementing Zero Trust architecture to ensure secure access across applications and environments. I also have experience in CIAM (Customer IAM), enabling secure external user access through Azure B2C and similar tools. I enjoy working closely with cross-functional teams, including security, infrastructure, and application teams, to deliver IAM solutions that align with business goals. I’m passionate about improving identity strategies through automation, API integrations, and AI-enabled IAM solutions that support scalability, agility, and resilience. I’m always eager to learn new technologies and contribute to building secure digital ecosystems. Let’s connect if you are working on IAM modernization, digital identity transformation, or enterprise access governance.

Country

City

United States

Industry

Information Technology & Services

Skill

AWS Identity and Access Management (AWS IAM), Azure IAM, OKTA Device Trust, Microsoft Active Directory, Azure Active Directory, Kubernetes, Docker, GitHub Actions, Git, Jenkins, Azure AD Conditional Access, OpenLDAP, Sun One LDAP, CA Directory, Azure Conditional Access, Multi-factor Authentication, FIDO2, SSL, Transport Layer Security (TLS), X.509 Certificates

Experience

Senior IAM/Okta Engineer

American Airlines

2024-1 - Present · 2 yrs 9 mos

Dallas, TX

Experienced IAM / Okta Specialist with deep expertise in designing and delivering secure, scalable identity solutions across large enterprises. Skilled in end-to-end SSO integrations (SAML/OIDC), Okta lifecycle automation, Workday-driven JML processes, and SCIM provisioning for critical SaaS platforms. Strong background in Adaptive MFA, Device Trust, authorization server design, and complex AD/Okta directory integrations. Adept at scripting automation with PowerShell, optimizing access governance with SailPoint, and building Splunk dashboards for security visibility. Proven ability to resolve L2/L3 auth issues, support audits, lead DR readiness, and collaborate across application, security, and compliance teams to deliver robust IAM solutions.

IAM Engineer

Arcesium

2022-4 - 2023-6 · 1 yr 3 mos

Delivered SAML-based SSO enablement for 50+ internal and SaaS applications with PingFederate. Led PingFederate upgrade (6.x → 8.x) with smooth migrations, testing, and app cutovers. Integrated MFA with PingID and OKTA including adaptive policies for workforce and contractors. Automated account provisioning scripts and built ServiceNow-driven IAM workflows for zero-touch onboarding. Designed Saviynt IAM governance policies, certification campaigns, and role-based access controls to strengthen compliance. Collaborated with auditors to support SOX/PCI controls, reducing stale access by 35% through recertifications.

IAM Developer (LDAP/SiteMinder)

DATA MINDS

2020-1 - 2022-3 · 2 yrs 3 mos

Implemented and maintained CA SiteMinder and PingFederate for secure authentication of enterprise and intranet applications. Migrated identity stores from Active Directory to Sun ONE LDAP with schema customizations and replication setups. Built automated attribute sync scripts using LDIF and shell scripting for dynamic user updates. Deployed high availability LDAP proxies with geo-based load balancing and failover. Developed attribute-level access controls (ACI) to enforce fine-grained entitlements. Supported firewall, DNS, and IAM endpoint configurations across VPN and partner environments.

Sailpoint Identity Now Engineer

Toshiba Software (India) Pvt. Ltd.

2017-3 - 2019-12 · 2 yrs 10 mos

Implemented enterprise SailPoint IdentityNow solution for identity lifecycle and governance across 15+ systems. Integrated AD, Azure AD, Workday, and Oracle DB via custom connectors and REST/SCIM APIs. Designed and deployed RBAC models, role mining, and certification campaigns to support SOX compliance. Developed custom BeanShell scripts for provisioning workflows, dynamic entitlements, and policy enforcement. Automated access requests and approvals by integrating SailPoint with ServiceNow workflows. Authored connector design docs, SOPs, and compliance artifacts for operational handoff.