Lalit Mangeshkar

Mumbai

Summary

Dedicated Identity and Access Management (IAM) Engineer with 3+ years of experience specializing in robust hybrid identity solutions. Proven expertise in Active Directory administration, Okta Identity Cloud management, and implementing stringent IAM compliance and governance frameworks. Proficient in user provisioning, access certification, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) to secure enterprise access for thousands of users. Actively developing advanced cloud IAM, security operations, and threat detection skills through hands-on lab environments. Eager to apply strong problem-solving and automation abilities to enhance organizational security posture.

Work History

Technical Analyst / IAM Engineer / Identity & Access Administrator

Wipro Limited (Client: Colgate Palmolive)

Mumbai, India

12.2020 - 07.2024

- Administered and secured Active Directory for over 500+ global users, managing identity lifecycle, group policies, and access controls for least privilege.
- Engineered and maintained Okta Identity Cloud for SSO and MFA, enhancing user experience and mitigating unauthorized access.
- Managed user provisioning and de-provisioning across critical enterprise applications (e.g., SAP CRM, Orchestrator), ensuring strict IAM compliance.
- Configured and supported secure remote access solutions, including Cisco AnyConnect and Palo Alto Global Protect VPNs, for distributed teams.
- Collaborated with IAM governance and security teams on quarterly access certification campaigns, investigating and remediating access conflicts.
- Developed comprehensive IAM documentation, improving operational efficiency, knowledge transfer, and audit readiness.
- Provided Level 2 technical support, resolving complex identity and access-related incidents within defined SLAs.

Technical Support / Relationship Manager

Vakrangee Limited

Mumbai, India

01.2018 - 11.2020

- Provided essential IT infrastructure support across banking and franchise locations, managing user accounts, permissions, and network access rights for 200+ endpoints.
- Implemented and enforced endpoint security measures (patch management, antivirus, security awareness) to protect critical assets.
- Troubleshoot and resolve diverse technical issues, including network connectivity (LAN/WAN, IP configuration, DNS resolution), coordinating with network teams for firewall adjustments.
- Identified and recommended preventive controls for user access patterns, fostering a proactive security posture.

Education

Master of Science (M.Sc.) - Information Technology (Cyber Security & Forensics)

Parul University

01.2026

Bachelor of Engineering (B.E.) - Electronics Engineering

Vidyalankar Institute of Technology

01.2016

Skills

Identity & Access Management: Active Directory (ADDS, GPO, DNS, Kerberos, LDAP), Microsoft Entra ID (Azure AD), Okta Identity Cloud, Entra Connect, IAM Governance, Identity Lifecycle Management (Provisioning, De-provisioning, Access Reviews), SSO, MFA, Conditional Access, RBAC, PIM concepts, Federation (SAML, OAuth/OIDC)
IAM Tools/Platforms: SailPoint (exposure), CyberArk (exposure), BeyondTrust (exposure), Oracle Identity Manager (exposure)
Cloud Platforms: Azure (IAM Services), AWS (IAM)
Operating Systems: Windows Server (2016, 2019, 2022), Linux (Ubuntu, CentOS), macOS
Scripting & Automation: PowerShell (Advanced), Bash, Python (Intermediate)

Networking & Security: TCP/IP, DNS, DHCP, Firewalls, VPN (Cisco AnyConnect, Palo Alto Global Protect), Wireshark, Log Analysis, Threat Modeling, Risk Assessment, Endpoint Security, SIEM (Splunk, Azure Sentinel exposure)
Databases: SQL, MySQL
Virtualization: VMware ESXi, VirtualBox
Compliance Frameworks: CIA Triad, NIST, ISO 27001 Awareness

Certification

- CCNA (Cisco Certified Network Associate) In progress learning
- Google Cybersecurity Professional Certificate
- Google IT Support Specialization (Coursera)
- Google IT Security: Defense Against the Digital Dark Arts

PROJECTS / CONTINUOUS LEARNING & LAB WORK

Hybrid Identity & Cybersecurity Lab Environment | Ongoing (Self-Initiated), - Engaged in hands-on labs (TryHackMe, Let's Defend, Cisco NetAcademy) to deepen expertise in:, - Identity and Access Management (IAM) scenarios, including federation and cloud identity integrations., - Security Operations (SOC analysis, threat detection, incident response simulations, log correlation)., - Network Security (firewall configuration, Wireshark analysis, penetration testing exercises)., - Progressed through Cisco networking curriculum, applying principles of routing, switching, and advanced network security fundamentals., Adaptive Vehicle Control System | Academic Project, - Developed an IoT-based monitoring system capturing real-time sensor data (temperature, gas, accelerometer)., - Implemented data storage and visualization interfaces using Visual Basic for system monitoring., Multiplex System | Engineering Project, - Designed an automated signal routing system, improving reliability and integration with existing infrastructure., - Applied electronics and embedded systems knowledge for fault-tolerant circuit design.

Timeline