Principal IAM Engineer with 15+ years of enterprise identity experience, including 8 years at Wells Fargo leading Identity Governance & Administration (IGA) architecture, platform strategy, and governance design for a global financial institution. Deep hands-on expertise in Oracle Identity Manager (OIM); led the RFP evaluation for next-generation IGA platform selection across SailPoint IdentityIQ, Saviynt, and Oracle IDM, including hands-on proof-of-concept implementations for SailPoint IdentityIQ and Saviynt.https://siteshiam.in/enhttps://siteshiam.in/articles/access-certifications-are-a-control/https://siteshiam.in/articles/access-certifications-are-a-control/A certification campaign that reviewers rubber-stamp isn't providing the control it's supposed to. What changes reviewer behavior, and why that's the actual design problem.Wed, 18 Feb 2026 00:00:00 GMTIGAAccess Governancehttps://siteshiam.in/articles/rbac-where-role-models-break-down/https://siteshiam.in/articles/rbac-where-role-models-break-down/Role mining from years of ad hoc entitlement grants rarely produces a clean role structure. Notes on where role-based access control gets hard, and the trade-offs that keep a role model maintainable.Thu, 05 Feb 2026 00:00:00 GMTIGAAccess Governancehttps://siteshiam.in/articles/why-mover-events-break-jml/https://siteshiam.in/articles/why-mover-events-break-jml/Joiner and leaver automation get most of the design attention. Mover events — transfers, promotions, department changes — are where access quietly accumulates instead of changing.Sun, 25 Jan 2026 00:00:00 GMTIGAhttps://siteshiam.in/articles/running-an-enterprise-iga-rfp/https://siteshiam.in/articles/running-an-enterprise-iga-rfp/Notes from authoring the requirements, running proof-of-concept builds on SailPoint and Saviynt, and evaluating all three against a real requirements set — what mattered more than any feature comparison matrix.Sat, 10 Jan 2026 00:00:00 GMTIGAhttps://siteshiam.in/case-studies/enterprise-rbac-governance-implementation/https://siteshiam.in/case-studies/enterprise-rbac-governance-implementation/Moving from direct entitlement assignment to a role-based access model with enforceable Segregation of Duties rules — and making access certifications legible to the business reviewers who actually have to complete them.Mon, 15 Dec 2025 00:00:00 GMTIGAAccess Governancehttps://siteshiam.in/articles/what-is-modern-iga/https://siteshiam.in/articles/what-is-modern-iga/IGA vendors converge on the same language. The differences that actually matter in a program are three design decisions, not the platform underneath them.Mon, 01 Dec 2025 00:00:00 GMTIGAAccess Governancehttps://siteshiam.in/case-studies/legacy-iam-platform-modernization/https://siteshiam.in/case-studies/legacy-iam-platform-modernization/Bringing a heavily-customized, on-prem Oracle Identity Manager platform to operational stability, then using that stability as the foundation for a governance modernization roadmap.Wed, 15 Oct 2025 00:00:00 GMTIGAAccess Governance