Shirin M

< 1 year of work experience

20224 yrs 10 mosPresent

Developed and maintained micro services-based applications using Python and ReactJS for the internal IAM platform, strengthening identity lifecycle and access governance for up to 80K+ users. Implemented SSO integrations for 20+ internal platforms, including SaaS applications, using SAML and OAuth, enabling centralized authentication and secure access across the organization. Led 30+ system integrations between in-house applications and cloud platforms (Google, Microsoft Azure, Salesforce, Freshdesk) with the centralized IAM system, using SSO and SCIM to ensure consistent authentication, authorization and access provisioning. Performed user access analysis across critical systems (VPN, SaaS) to identify over-privileged accounts, dormancy, stale access and policy gaps, contributing to access reduction and risk mitigation for 1000+ users. Built and customized a Privileged Access Management (PAM) solution to strengthen Zero-Trust controls, enabling centralized monitoring, governance and visibility of privileged activities across systems for 1000+ users. Worked with identity federation and authentication protocols including SAML, OAuth 2.0 and OIDC, with knowledge of enterprise authentication, service identities and access-control patterns. Conducted technical assessments, cloud security reviews and architecture reviews from an IAM and access-control standpoint; created and enforced security policies to govern and audit cloud deployments. Defined and documented cloud security standards and Infrastructure-as-Code controls using Terraform for resource deployments, with focus on identity, access boundaries, RBAC/PIM and least-privilege principles. Handled and automated CSPM processes for business cloud environments, driving remediation of security findings and improving cloud security posture scores up to 80%.

Mar 20226 mosAug 2022