Open to opportunities

Ashish Dhungana

@ashishdhungana

Message

Senior Identity & Access Management engineer delivering secure IGA and PAM with SailPoint and CyberArk.

United States

Message

What I'm looking for

I’m looking to lead enterprise IAM/IGA and PAM initiatives—building least-privilege RBAC/ABAC, automating JML provisioning with SailPoint, integrating CyberArk, and strengthening audit-ready compliance with strong engineering and Zero Trust practices.

I’m a Senior Identity & Access Management (IAM) Engineer with over 7+ years of experience designing, implementing, and optimizing enterprise Identity Governance and Administration (IGA) and Privileged Access Management (PAM) solutions.

At CVS Health, I lead administration and enhancement of SailPoint Identity Security Cloud (ISC), driving RBAC/least-privilege alignment, lifecycle automation with JML (Joiner, Mover, Leaver) using Workday as the authoritative source, and end-to-end provisioning across Active Directory and Azure AD (Entra ID) plus SaaS applications.

I develop and maintain SailPoint rules and workflows (Correlation, Before/After Provisioning, Field Value, Validation, and Workflows) using Java and BeanShell, and I onboard applications through SCIM, REST APIs, JDBC, LDAP, and Web Services connectors. I also design ABAC policies and implement Segregation of Duties (SoD) governance, supporting HIPAA and SOX audit readiness through access certification campaigns and reporting.

I integrate CyberArk privileged accounts into SailPoint governance workflows, administer CyberArk PVWA/Privilege Cloud/Digital Vault, and support SSO integrations using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC). With a strong compliance focus across SOX, HIPAA, PCI DSS, and NIST 800-53—and alignment to Zero Trust and MFA/Conditional Access—I help teams build reliable, auditable identity security systems.

Experience

Work history, roles, and key accomplishments

Current

Senior IAM Engineer

Current

CVS Health

Apr 2024 - Present (2 years 3 months)

Administers and enhances SailPoint Identity Security Cloud (ISC) to deliver enterprise identity governance for healthcare workforce and corporate systems. Leads RBAC/ABAC, Workday-driven JML provisioning, access certifications, SAML/OAuth/OIDC SSO integrations, and CyberArk governance workflows.

Identity Security Cloud (ISC)RBAC Workday Active Directory SCIM REST APIs JDBC LDAP SAML OAuth SSO MFA CyberArk PVWA Privileged Access Management HIPAA SOX AWS IAM Terraform GitHub Zero Trust Java PowerShell XML JSON

Senior IAM Engineer

Ford Motors

Nov 2022 - Mar 2024 (1 year 4 months)

Supports daily operations and enhancements of SailPoint IdentityIQ 8.x for enterprise identity lifecycle governance. Builds provisioning and certification workflows using Java/BeanShell rules and integrates Workday, AD/Azure AD, federation (SAML/OAuth/OIDC/WS-Fed), ServiceNow, and CyberArk.

IAM IAM Engineer

First Bank

Feb 2018 - Oct 2022 (4 years 8 months)

Assisted with implementation and administration of SailPoint IdentityIQ 7.x/8.x for identity lifecycle governance in a global retail and payment processing environment. Managed AD/Azure AD synchronization, onboarding/termination workflows, correlation and RBAC/birthright access rules, and access certification and compliance documentation.