Saket Sahay

About Saket Sahay

I am an IAM/PAM Engineer with about 6 years of experience focused on building secure and…

Experience

1. Senior Security Analyst

   Tech Mahindra

   Jan 2024 — Present · Pune, IN

   Delivered PAM operational support for BeyondTrust Password Safe in a hybrid, multi-domain environment Onboarded and managed privileged accounts across servers, network devices, and databases Automated credential rotation and implemented granular access policies Integrated BeyondTrust with Azure AD and Okta using SCIM for provisioning and SAML for SSO Implemented Just-In-Time (JIT) access for high-risk accounts with approval workflows Automated routine PAM tasks using PowerShell and REST APIs Diagnosed and resolved vaulting, heartbeat, and session launch issues Maintained platform availability, conducted health checks, and performed patch upgrades Developed technical documentation and standard operating procedures (SOPs) for audit readinessLed a project to modernize the client\'s identity infrastructure by implementing Microsoft Entra ID (Azure AD) for centralized identity and access management. Integrated 20+ enterprise applications (e.g, Salesforce, Workday, JIRA, BTPAM PS) with SSO using SAML, OAuth2, and OIDC, ensuring seamless and secure user authentication. Implemented Conditional Access Policies based on Zero Trust principles to restrict high-risk logins from non-compliant or external devices. Deployed Privileged Identity Management (PIM) to secure Azure AD administrative roles with approval-based JIT access. Designed and automated Access Packages and Entitlement Management for HR and Finance departments to enable compliant and role-based access provisioning. Developed PowerShell and Microsoft Graph API scripts for bulk access assignments, license allocation, and user offboarding automation. Enabled Identity Protection alerts and integrated risk-based reporting into the SOC team\'s dashboards for proactive threat monitoring. Supported audits by configuring sign-in logs, audit logs, and delivering detailed access review reports on demand.