Sunnykumar K.

About Sunnykumar K.

I work at the intersection of Identity & Access Management, Privileged Access, and Zero Trust, helping organizations reduce identity-driven risk across both human and machine access.In many enterprise environments, identity risk doesn’t come from missing controls — it comes from over-provisioned access, static roles, and disconnected IAM and PAM workflows. My focus is on identifying where these breakdowns occur and designing access models that scale without increasing operational friction.I’ve supported IAM initiatives across complex environments, contributing to the design and implementation of access governance, identity lifecycle controls, and PAM integrations — with an emphasis on risk-aware and behavior-informed access decisions.Areas I focus on include- Identity Risk Scoring & Access Analytics- Privileged Access Management (PAM) Integration- Zero Trust & Continuous Access Evaluation- Access Governance, Certification, and Role Modeling- Securing Non-Human & Machine IdentitiesI regularly share practical IAM insights drawn from real-world scenarios — especially where theory breaks in production environments.If you’re evolving an IAM or Zero Trust program, I’m always open to exchanging perspectives.

Experience

1. Lead Software Developer

   Caterpillar Inc.

   Oct 2020 — Present

   Worked with various IAM tools: Microsoft Azure Active directory,Sailpoint and okta• Configured authentication mechanisms: SSO, MFA, and SAML SSO.• Established identity provider and service provider configurations for seamless Single Sign-On functionality.• Demonstrated hands-on experience with PAM for managing critical accesses and accounts.• Integrated application passwords into CyberArk credential configurations for enhanced password security.• Designed and developed custom LCM events: Joiner, Mover, and Leaver.• Automated monitoring processes to detect aggregation and provisioning failures, generating corresponding reports.• Integrated ServiceNow via APIs to create tickets for critical task failures or long-running tasks.• Proficient in writing certification rules: exclusion rules, pre-delegation, and auto-closing rules.• Developed customized mitigation expiration workflows for remediation after expiration/sunset.• Onboarded and implemented REST-based web service connectors via customized APIs for enhanced functionality.• Created application and access scopes enabling specific functionalities for population/workgroups.• Customized certification UI and definitions for additional information inclusion in access reviews.• Hands-on experience in integrating IIQ with Aurora DB and automating provisioning processes.• Designed Access/Bundle pre-requisites to restrict users from managing access.• Implemented Active Directory Password policies for user/system/Bot accounts.• Designed workflows/business processes to trigger events based on identity attributes.• Hands-on experience in onboarding Salesforce connector app with JWT.• Implemented SAML SSO configuration between IdP and SP.• Developed RBAC automation for bundle creation and user provisioning.• Customized Segregation of Duties (SOD) process for conflict identification and resolution.• Demonstrated experience in agile methodology and SDLC frameworks.

Education

• California Baptist University

  Master of Science - MS, Computer Software Engineering

• Gujarat Technological University (GTU)

  Electronics and communication