Kalson Karki

I’m a Sr. IAM Engineer with over 7 years of experience in IAM (Identity Access Management) and Governance programs across healthcare and insurance sectors. I specialize in SailPoint IdentityNow cloud-native deployments, lifecycle automation, and Privileged Access Management, while also supporting legacy IdentityIQ migrations into modern cloud IAM.

I deliver end-to-end identity governance and administration using SailPoint IdentityNow and SailPoint IdentityIQ—covering access certifications, role engineering, and application onboarding. I configure authoritative and target sources, including IdentityNow connector integrations for SCIM 2.0 provisioning and identity lifecycle orchestration via workflows and lifecycle automation.

I strengthen security and operational control by engineering least-privilege access with CyberArk Privileged Access Manager, administering CyberArk PVWA and CyberArk PSM session controls for Just-In-Time Privileged Access. I also implement SSO and federation with Okta using SAML 2.0 and OpenID Connect, and manage directory services including Active Directory and Microsoft Entra ID, with hybrid SCIM-based provisioning.

On the platform side, I enforce Zero Trust principles across AWS IAM and Azure Conditional Access policies for cloud workload identities, and standardize RBAC/ABAC models and entitlement catalogs to support access reviews and Identity Threat Detection and Response (ITDR). I build automation with Python/Java REST integrations and IdentityNow Transforms/Rules to reduce manual joiner-mover-leaver overhead, and I validate SOX, HIPAA, and SOC 2 readiness through access certification campaigns and audit evidence generation.