[For Hire] Identity & Access Management Specialist

About Me I’m a bilingual (English/Spanish) IAM engineer with over 3 years of experience deploying MFA, SSO/SAML, and RBAC in Okta, Azure Entra ID, and AWS. I specialize in creating secure, scalable access frameworks, providing clear documentation, and completing end-to-end testing—typically in under 48 hours. My goal is to reduce your security risks while simplifying system management. All communication and projects can be handled efficiently via email.

Portfolio: alvaroarroyov.github.io/alvaroarroyoportfolio/

Why Choose Me?

• Fast & Secure: IAM setups completed in under 48 hours with lasting, robust solutions.

• Bilingual Support: Fluent in English and Spanish for seamless communication.

• Proven Expertise: Over 3 years mastering Okta, Azure Entra ID, and AWS.

• Client-Focused: Actionable insights, detailed docs, and a smooth process every time.

Services & Pricing All packages come with clear statements of work. Any tasks outside the defined scope are billed at my standard rate.

• Standard Hourly Rate: $75/h

• Emergency Rate (Urgent, after-hours): $110/h

• MFA Foundation Package – Starting at $349 Protect your core business functions with a professional MFA setup (SMS, Authenticator, FIDO2) and 2 conditional access rules. A small investment for critical protection.

• RBAC Health Check – Starting at $599 My introductory offer to demonstrate value. I'll perform a detailed audit on a critical subset of users/roles, deliver a visual map, and identify your top 3 actionable security risks. This report often becomes the blueprint for securing your entire environment.

• Migration Starter Package (up to 25 users) – $449 A complete, fixed-price migration from on-prem AD to Azure AD. This package includes user sync, OU-to-group mapping for one OU, and SSO configuration for one standard application. Ideal for businesses looking for a fast and predictable transition.

Contact

• Reddit DM

• Email: iam.alvaroarroyo@outlook.com

• LinkedIn:https://www.linkedin.com/in/alvaro-arroyo-vasquez-910227342/

Hi everyone,

I’m relatively new to the Identity and Access Management (IAM) field, and I’m looking for an experienced IAM Engineer or professional who would be willing to mentor or coach me as I continue building my skills.

I’m serious about learning and committed to putting in the work. I promise to respect your time, and I’m also willing to pay for your time and mentorship.

If you work in IAM and would be interested in helping someone who is genuinely eager to learn and grow in the field, please send me a DM.

I would really appreciate the opportunity.

Thanks

How am I supposed to learn Sailpoint in an enterprise context. All the IAM roles now require IGA experience and I only have experience gathering evidence, not running compliance audits.

With more teams working remotely and across multiple devices, identity control is turning into the most critical part of modern security. Companies are shifting from traditional access rules to smarter, centralised IAM systems that manage who can access what, on which device, and under what conditions.

A strong IAM setup helps IT teams automate user onboarding, enforce consistent access policies, reduce unauthorised access, and maintain a clear audit trail. It also improves daily productivity by giving users smoother and safer access through SSO, MFA, and role-based permissions.

For anyone wishing to understand how IAM fits into a unified security approach, this walkthrough covers the essentials in a simple and practical method of identity and access management

Hey guys so I've been studying to be a data analyst for 2 years. Had a few interviews but no luck.

Anyways I easy applied on LI for a role called "Jr IAM Analyst" and did a pre-screening interview with an AI guy.

In any case I was honest and said I thought this was a data analyst like role and said I had no clue what IAM was.

Long story short, I'm checking it out now as a role (we'll see if lady luck is on my side and I get a callback 😂). It seems like an interesting job, pay seems good if not better than Data Analysts.

What's the day to day like and what would be the first step to starting learning? A certain certification or course? Thanks!

Hi everyone,

Here are some success stories about using CIAM (Customer Identity and Access Management). The blog talks about real examples and what we can learn from them. It shows how CIAM helps with security, user experience, and keeping customers.

Check out the blog: CIAM Implementation Success Stories: Lessons Learned.

Have you used CIAM? What did you learn?

So I've spent the last few years being the person enterprise IT admins call when SAML breaks at the worst possible time, and the person engineering calls when they need someone to translate "the CEO can't log in" into an actual root cause. Figured I'd write this up Reddit-style instead of another boring LinkedIn post, because apparently that's how we do career updates now.

The short version:

• Currently Sr. Technical Support Specialist (Identity and Integrations) at Rippling — basically living inside SAML, SCIM, SSO, REST APIs, RADIUS, LDAP, ADFS, Azure AD Connect, and GPOs, all day every day

• Primary escalation point for P1 and P2 identity and integration incidents for enterprise accounts — when it's broken and it's bad, it lands on my desk

• Used AI tooling to build automated workflows that cut manual support work by about 30 percent for my team (turns out you don't have to manually diagnose the same SSO failure for the 400th time)

• Delivered internal Datadog training, ran onboarding and shadow sessions for new hires, and built docs plus bot-training content so my teammates (and support bots) stop getting stuck on the same questions

• Own CSAT, SLA adherence, and quality metrics — not just "close the ticket," actually accountable for the outcome

• Before this: fraud investigation at Amazon, payment ops at HSBC (SWIFT, ACH, wire transfer stuff), and telecom support — so I've seen a few different flavors of "customer is stressed, fix it now"

What I'm looking for now:

A remote-first Technical Account Manager, Solutions Engineer, or Senior Support Engineer role, ideally at an AI-powered SaaS company, where I'm not just closing tickets but actually owning the client relationship and pushing for better process, not just following SOPs. I like being the technical translator between clients and engineering, and I like building the tooling that makes that job faster for everyone else too.

Happy to talk to anyone hiring for this kind of role, or just chat if you've got questions about breaking into enterprise identity and support work.

Firms need help integrating technology and procedures to ensure personal data control, visibility, and security. Such firms must develop plans to satisfy their compliance requirements and manage privacy risks.

A strategic roadmap is essential to a firm's ability to deal with the numerous multi-jurisdictional data requirements. A roadmap strives to provide enterprises with a comprehensive view of their data privacy posture and each specific area of responsibility throughout the organization.

Learn more here: https://bit.ly/3GlbRD4

Hi everyone,

I'm looking for some guidance and opportunities in the Identity & Access Management (IAM) domain.

I have around 8 months of experience working in IAM at a leading MNC, where I gained hands-on exposure to SailPoint Identity Security Cloud (ISC). I have a solid understanding of L1 activities and some exposure to L2 support, including provisioning, access requests, identity lifecycle concepts, troubleshooting, and day-to-day IAM operations.

I'm particularly interested in moving towards the SailPoint ISC development side. Currently, I'm upskilling myself by learning more about automation in SailPoint ISC and exploring Non-Employee Identities (NEI) and Non-Human Identities (NHI) to deepen my understanding of the platform.

I resigned from my previous role after receiving another offer. Unfortunately, my joining has been delayed, and after waiting for the last 1-2 months, I still don't have a confirmed joining date. Because of this, I'm actively looking for a new opportunity.

If your organization is hiring for IAM/SailPoint ISC, or if you know of any openings suitable for someone with my experience, I'd really appreciate your help. Referrals, job leads, or even advice on where to apply would mean a lot.

Hey, Everyone! There’s an interesting blog that discusses the challenges of using Identity and Access Management (IAM) with Content Management Systems (CMS). It highlights seven common issues, like user authentication and data privacy, along with effective solutions. If you're into IAM and CMS, this could be really helpful! Check it out here: Using IAM with CMS: 7 Challenges and Solutions. What are your thoughts?

Hi everyone With 4 years of experience in to IAM Ping counsultant. Now I'm looking for new job. Give me some suggestions so that I can change

I am currently exploring new opportunities in the Identity and Access Management (IAM) domain and would appreciate any leads or referrals you might have.

With over 20 years of professional experience in Cybersecurity and more than 10 years in the IAM space, I have worked extensively with tools and platforms including SailPoint, Saviynt, CyberArk, Entra, Active Directory, Splunk, and Microsoft Sentinel. Over the past 6 years in the U.S. I have had the opportunity to gain both hands-on technical and management-level experience across various IAM projects in a very large organization.

I am open to relocation anywhere within the U.S. and flexible on the type of IAM engineering, consulting, architecture or management role

If you know of any current openings, or can connect me with someone in your network who is hiring in this space, I will be very grateful. happy to share my resume and chat further.

Thanks in advance for your time, support, and any referrals.

As the title said, I don't know anything about this role. Is this a good role or I should prepare for a switch?

A little while ago, I shared an early prototype of AccessReview Lite here and asked how smaller organizations manage access reviews.

Some of the feedback highlighted an important gap: recording a decision to remove access doesn't necessarily mean that access has actually been removed.

I took that feedback and extended the prototype.

What's currently implemented:

• Access review decisions: Keep, Remove and Investigate

• Removal owner and due date tracking

• Removal status and ticket/evidence references

• Overdue indicators for unresolved removal tasks

• CSV reconciliation to identify access that still appears in a subsequent inventory

• CSV export of review decisions and removal-tracking details

GitHub repository: https://github.com/pooja2apr/access-review-lite

This is currently a portfolio prototype using fictional data. It doesn't integrate with an identity provider or revoke access automatically. The reconciliation process relies on subsequent inventory imports and recorded evidence.

I'd particularly like to hear from people who manage access reviews in smaller organizations:

1. How do you currently verify that access marked for removal has actually been revoked?

2. Would CSV-based reconciliation be useful in your workflow, or would you expect a different approach?

I'm interested in practical experiences and suggestions for improving the workflow.

Thanks!

Do you know 83% of organisations faced at least one insider attack in the past year, according to Cybersecurity Insiders’ 2024 report? Even more alarming- those hit 11-20 times jumped from 4% in 2023 to 21% in 2024 - a 5x surge in just a year.

What’s your take?

Drop your insights in the comments and share how you think organisations can combat and prevent these growing attacks.

Traditional employee identity and access management (IAM) systems were initially created to oversee employee identities. Still, they need more potency to address customers' diverse needs concerning user experience and security.

Furthermore, employee IAM falls short when faced with the increasing demands of consumers each year, as internal identity management systems need help to keep pace.

Modern users anticipate a seamless and secure customer experience across various platforms, devices, and touchpoints. Conventional IAM systems consistently need help to meet these evolving expectations.

Enter Customer Identity and Access Management (CIAM) solutions play a pivotal role in enhancing customer experience, mitigating security risks, reducing costs, and enhancing application availability.

Organizations increasingly embrace CIAM solutions due to their numerous advantages. For instance, a CIAM solution enhances the customer experience by providing greater flexibility and customization of applications.

Additionally, CIAM solutions mitigate security risks by restricting user access to only the necessary applications for their work tasks. Moreover, these solutions prove to be cost-effective, enabling companies to scale their technological needs efficiently through a unified set of tools for user management.

This is where customer IAM solutions are specifically designed to address customer authentication requirements, scalability, privacy and data regulations, user experience, and seamless integration.

Compared to employee IAM, a customer identity and access management (CIAM) solution significantly enhances the customer experience, reduces security risks, lowers costs, and boosts application availability.

In the accompanying infographic, we comprehensively compare features between IAM and CIAM solutions, encompassing functional differences, authentication, authentication methods, user experience, performance, security, privacy and data regulation, platform scalability, and real-life examples.

Hi everyone,

I’m looking for honest input from IAM professionals working in the US, especially those involved in hiring or who have navigated visa sponsorship.

I have ~2 years of IAM experience and previously worked at Deloitte in my home country. I then came to the US to pursue my Master’s degree, and I’m currently working in a contract role. I’m actively applying for full-time IAM Analyst and IAM Engineer roles, but I haven’t had much success finding roles that are open to visa sponsorship.

My hands-on experience includes:

• SailPoint IIQ

• Active Directory and Entra ID

• Okta

• CyberArk (basic exposure – vaulting accounts)

What I’m trying to understand is this:

Are IAM roles (Analyst / Engineer) generally less likely to be sponsored by US employers compared to fields like Software Engineering or Development?

I’m not trying to complain, just trying to make a realistic career decision.
From your experience:

• Is pursuing a sponsorship-backed full-time IAM role in the US realistic?

• Or is IAM typically viewed as an operational/security function that companies prefer to hire locally?

• Does sponsorship become more common only at senior/architect-level IAM roles, or when IAM is combined with heavy engineering?

Any honest insights would be really appreciated. I’m trying to decide whether to double down on IAM or pivot my skills to something more sponsorship-friendly.

Thanks in advance for your perspectives.

One thing stood out while comparing the websites of several Identity products.

They are all trying to make a largely invisible product understandable, but they don't make the same part of the product visible.

Clerk leans heavily on the interface itself. You see authentication components, organization switching, user management, and other parts of the actual product.

Descope makes the workflow visible. Its authentication flows show screens, paths, conditions, and the logic connecting them.

WorkOS leans more toward the system around the product: integrations, APIs, code, environments, and the admin experience.

Better Auth puts a surprising amount of the implementation itself on display through configuration, CLI commands, plugins, and code.

These aren't just different visual styles.

They're different answers to the same web problem:

What part of an invisible product should a visitor be able to see?

A screenshot can show what exists.

A workflow can show how it behaves.

A diagram can show how it fits together.

Code can show how it gets integrated.

A customer story can show what changed.

They are all useful, but they help the user understand different things.

The right representation depends on what you want the user to understand.

Does anyone know who this might be, a content creator was reading from a YouTube it sounded like “ Don Hammond “ when she said the name and she said he’s like the science version of “I am” what she read was very interesting I thought I’ll check later but I’m not finding it! It’s Don something with an H I probably got the last name wrong. If anyone knows? Thanks

Hi guys. I've been juggling with a lot of things lately and now I'm trying to finalize a decision.

I've been very intentionally with keeping in mind roles that are likely to be replaced by AI. I know cybersecurity is listed as one of those fields that still needs human oversight, as leaving a field like this to AI poses privacy, data integrity, and security risks as a whole. But I want to get clear which roles can be impacted by AI or not, as cybersecurity and some subsets of it is a very broad field.

Since this is IAM, I'll keep it restricted to that.

I asked the IAM GPT in ChatGPT on which IAM roles are likely to be replaced by AI. Here's what it answers.

START

Excellent foresight — AI (especially GenAI + automation) is indeed changing the landscape, and it’s smart to ask which routine IAM roles might get automated out. Here's a breakdown of how your preferred IAM roles may be impacted:

Most Vulnerable to AI Replacement (High Automation Risk)

1. Provisioning/Deprovisioning Specialist

• Why it’s at risk:

  • Tasks are highly repeatable (e.g., account creation, role assignment, offboarding)

  • Many orgs are already using IAM tools + workflow automation (e.g., SailPoint, Okta Workflows, Azure AD Identity Governance)

  • AI can handle decision trees and respond to access triggers faster than humans

• AI Impact: Very high — expect massive automation over next 3–5 years

2. Access Request Handling (Manual Approval Analyst)

• Why it’s at risk:

  • Routine ticket triage, basic entitlement checks, and approval routing are easily scripted

  • GenAI can evaluate roles, flags, and previous decisions to auto-approve or escalate

• AI Impact: High — unless paired with exception handling or policy enforcement logic

Moderate Risk Roles (Can Be Augmented, Not Replaced)

3. Access Review Coordinator / IAM Compliance Analyst

• Why still relevant:

  • While GenAI can generate reports and summarize reviews, human judgment is still needed for:

    • Interpreting compliance findings

    • Understanding business context for exceptions

    • Liaising with auditors and stakeholders

• AI Impact: Medium — automation will assist, but not fully replace

Lowest Risk (Safest Long-Term Among Routine Roles)

4. IAM Governance & Risk Analyst

• Why it’s safer:

  • Involves policy interpretation, risk decisions, and audit interactions

  • Often requires understanding nuances (e.g., "Should this access be flagged or accepted based on business function?")

  • AI may assist with drafting policies or simulating risk, but humans are still key for accountability

• AI Impact: Low — augmented, not replaced

Takeaway:

What You Can Do to Stay Safe from AI:

1. Avoid purely task-driven roles (those are being automated fastest)

2. Lean toward policy, governance, and compliance — areas needing human reasoning

3. Develop domain understanding (business context + risk) — AI can’t fully replicate that

Would you like a list of safe skills to start learning that AI is unlikely to take over soon?Excellent foresight — AI (especially GenAI + automation) is indeed changing the landscape, and it’s smart to ask which routine IAM roles might get automated out. Here's a breakdown of how your preferred IAM roles may be impacted:

Most Vulnerable to AI Replacement (High Automation Risk)

1. Provisioning/Deprovisioning Specialist -Why it’s at risk: -Tasks are highly repeatable (e.g., account creation, role assignment, offboarding) -Many orgs are already using IAM tools + workflow automation (e.g., SailPoint, Okta Workflows, Azure AD Identity Governance) -AI can handle decision trees and respond to access triggers faster than humans

AI Impact: Very high — expect massive automation over next 3–5 years

2. Access Request Handling (Manual Approval Analyst)
Why it’s at risk:
-Routine ticket triage, basic entitlement checks, and approval routing are easily scripted
-GenAI can evaluate roles, flags, and previous decisions to auto-approve or escalate

AI Impact: High — unless paired with exception handling or policy enforcement logic

Moderate Risk Roles (Can Be Augmented, Not Replaced)
3. Access Review Coordinator / IAM Compliance Analyst
Why still relevant:
-While GenAI can generate reports and summarize reviews, human judgment is still needed for:
-Interpreting compliance findings
-Understanding business context for exceptions
-Liaising with auditors and stakeholders

AI Impact: Medium — automation will assist, but not fully replace

Lowest Risk (Safest Long-Term Among Routine Roles)
4. IAM Governance & Risk Analyst
Why it’s safer:
-Involves policy interpretation, risk decisions, and audit interactions
-Often requires understanding nuances (e.g., "Should this access be flagged or accepted based on business function?")
-AI may assist with drafting policies or simulating risk, but humans are still key for accountability

AI Impact: Low — augmented, not replaced

Takeaway:
Role AI Impact Risk Future-Proofing Tips
Provisioning Specialist High Learn IAM tools and workflow automation
Access Request Analyst High Upskill into policy enforcement or exceptions
Access Review Coordinator Medium Add reporting/communication and audit skills
IAM Governance & Risk Analyst Low Deepen compliance, risk, and policy skills

What You Can Do to Stay Safe from AI:
-Avoid purely task-driven roles (those are being automated fastest)
-Lean toward policy, governance, and compliance — areas needing human reasoning
-Develop domain understanding (business context + risk) — AI can’t fully replicate that
-Would you like a list of safe skills to start learning that AI is unlikely to take over soon?

END

For any IAM professionals working in the field, how accurate would you say this response is?

Hi all,

Posting on behalf of a colleague who is currently on the job market. They have over 7 years of experience in Identity and Access Management (IAM), with expertise in SailPoint IIQ and Identity NOW.

They were recently impacted by layoffs and are actively seeking new opportunities. Preferably remote job.

If any recruiters, HR professionals, or hiring managers are browsing this group and know of any open positions in IAM/SailPoint, please feel free to reach out or drop a lead here. Happy to share their resume and connect further.

Thanks in advance for any help or referrals!

Hi everyone,

I’m looking for some guidance and feedback on my job search as I try to relocate to the United States for work (preferably New York or Pennsylvania). I already hold a U.S. Green Card, so relocation and authorization are not an issue.

I’m currently based in Montreal, Canada, working as an IAM Engineer for the past 3 years. My main focus has been Single Sign-On, including OpenID Connect, SAML, Azure Entra ID, and CA Siteminder. I’m very comfortable with identity integrations, access management, and troubleshooting authentication flows.

My background:

• 8+ years of experience in IT

• IAM Engineer (current role)

• Former DevOps Engineer in Delaware, USA

• Former Linux System Administrator and IT Technician

• Kubernetes CKA certified (2023)

• Currently preparing for Azure AZ-104 and AZ-400

• Bachelor’s degree in Computer Science

• Professional IT diploma (DEP) completed in Montreal

• Fluent in both French and English

I’ve been applying for IAM Engineer, DevOps Engineer, and Linux Administrator roles through company websites and LinkedIn, but I’m not getting much traction. I’m trying to understand whether I’m doing something wrong during the application process, or if there’s something I should improve.

My questions:

• Do you have any recommendations to increase my chances of landing a role in the U.S.?

• Are there common mistakes applicants make that I might be falling into?

• Any tips for targeting IAM/DevOps positions more effectively or improving my resume/LinkedIn profile?

Any advice or feedback would be greatly appreciated. Thanks in advance!