ABISHEK GYAWALI

I’m a Senior Identity and Access Management (IAM) Engineer with 7+ years of experience designing, implementing, and supporting enterprise Identity Governance and Administration (IGA) and Privileged Access Management (PAM) solutions. I focus on secure identity lifecycle management, least-privilege access, and Zero Trust security using SailPoint IdentityIQ/IdentityNow and CyberArk PAM.

In my recent work, I designed and configured SailPoint IdentityNow lifecycle states, provisioning policies, identity transformations, and access profiles to automate onboarding, transfers, leave-of-absence processing, contractor lifecycle management, and deprovisioning. I’ve also led RBAC and role mining, implemented Segregation of Duties (SoD) controls, coordinated User Access Reviews (UAR)/access certification campaigns, and built API-based provisioning workflows using REST APIs and SCIM—while integrating Workday, Active Directory, Azure AD (Entra ID), LDAP, and enterprise applications. I bring strong authentication engineering with SSO and MFA (SAML 2.0, OAuth 2.0, OpenID Connect), integrate CyberArk for privileged account onboarding and governance, and collaborate across DevOps, cloud, security, and compliance teams to promote enterprise identity governance best practices.