Sowandarya Mala Ponnambalam Thiyagarajan

Identity and Access Management

• Delivered L2 support for Identity and Access Management (IAM) services, enhancing security through SSO, MFA, access management, and Microsoft 365 licensing.
• Support Single Sign-On (SSO) integrations for enterprise applications using SAML 2.0 and OpenID Connect (OIDC).
• Administered Microsoft Entra ID and hybrid identity environments, ensuring seamless user access and security compliance.
• Assist application teams with onboarding and configuring applications in Microsoft Entra ID for federated authentication.
• Manage user provisioning, deprovisioning, role-based access requests, and account lifecycle management through ServiceNow.
• Troubleshoot authentication and authorization issues involving SAML assertions, tokens, claims, and federation configurations.
• Support claims-based authentication validation and user access troubleshooting across enterprise applications.
• Coordinated certificate renewal and rollover activities for SAML-integrated and federated applications, minimizing downtime, and maintaining secure access.
• Configure and validate SSO settings, reply URLs, entity IDs, user claims, and access requirements.
• Perform user access validation and token analysis to troubleshoot authentication-related incidents.

Supported large-scale, multi-forest Active Directory environments across geographically distributed locations.
Administered user onboarding, offboarding, provisioning, and deprovisioning processes.
Managed security groups, delegated permissions, and user access controls.
Created, modified, and maintained Group Policy Objects (GPOs) to enforce security and compliance standards.
Monitored and troubleshot Active Directory replication, synchronization issues, FSMO roles, DNS, and NTP services.
Performed administration, maintenance, health checks, and troubleshooting of Domain Controllers.
Reviewed security, system, and directory service logs to identify and resolve infrastructure issues.
Performed Active Directory backup, recovery, and restoration activities.
Managed PKI certificate requests, templates, CSR generation, and certificate issuance processes.
Supported Windows Server 2016/2019-based Active Directory infrastructure and authentication services.
Managed user attributes and directory updates to support identity lifecycle management and access governance.
Troubleshot authentication issues related to Kerberos, DNS, GPO, and directory synchronization.
Collaborated with global teams to support enterprise directory services and identity management operations.
Created and managed users, groups, and administrative roles in Microsoft Entra ID.
Supported Azure AD Connect synchronization, identity troubleshooting, and hybrid identity operations.
Managed directory synchronization and user attribute updates across on-premises and cloud environments.
Deployed and managed applications using Microsoft Intune.
Supported device enrollment, compliance policies, configuration profiles, and endpoint management.
Managed Azure AD-joined devices and local administrator assignments.
Troubleshot authentication, synchronization, and device management issues in hybrid environments.