Ranjith
Selvam.
IAM Solution Architect engineering enterprise identity for banks, governments & global enterprises.
19+ years architecting IAM · IGA · PAM across NetIQ, Okta, SailPoint, Entra ID, AWS and ForgeRock. Zero Trust by design.
Engineering identity
at enterprise scale.
Experienced IAM Solution Architect with 19+ years designing and delivering enterprise Identity & Access Management, Identity Governance (IGA), and Privileged Access (PAM) solutions across banking and large enterprises. Deep expertise in SAML, OAuth 2.0, OIDC, SCIM, MFA, RBAC, Zero Trust, PKI, and compliance frameworks (GDPR, PCI-DSS, SOX).
The control plane of trust.
A control-room view of the disciplines, platforms and protocols I architect with — daily.
Architecture
- ›IAM Architecture & Strategy
- ›Zero Trust
- ›Security Architecture
- ›PKI / Encryption
- ›Threat Modeling
Identity Governance
- ›NetIQ
- ›SailPoint
- ›EntraID
- ›SCIM
- ›JML Lifecycle
SSO & Federation
- ›SAML 2.0
- ›OAuth 2.0
- ›OIDC
- ›ADFS
- ›Okta
- ›ForgeRock
Privileged Access
- ›CyberArk
- ›BeyondTrust
- ›HashiCorp
- ›MFA
- ›Passwordless
Access Control
- ›RBAC
- ›ABAC
- ›Policy Enforcement
- ›Self-Service
- ›Access Certification
Cloud Identity
- ›AWS IAM
- ›Azure AD / Entra ID
- ›GCP
- ›Hybrid IAM
DevOps & SDLC
- ›CI/CD Integration
- ›Agile
- ›Microservices
- ›Containers
- ›APIs
Operations
- ›ServiceNow
- ›PagerDuty
- ›Remedy
- ›ITIL
- ›SLA / KPI / OKR
Compliance
- ›GDPR
- ›PCI-DSS
- ›SOX
- ›STRIDE
- ›OWASP Top 10
- ›MITRE ATT&CK
Projects & case studies.
HappiestMinds — RBAC Automation for 300K+ Identities
Automated role lifecycle and access certifications for 8+ clients — 85% reduction in manual reviews.
Bahrain Ministry — National SSO & Federation Rollout
Designed and rolled out national-scale SSO, SAML 2.0 federation and SSPR for a Middle-East government client.
Honeywell — NetIQ Global Upgrade 4.0/4.5 → 4.7
Owned end-to-end migration of Honeywell's global NetIQ identity stack with 100% uptime during cutover.
Writing on identity & trust.
Joiner-Mover-Leaver — The Metric That Actually Predicts Breach Risk
Every audit asks for it. Few enterprises measure it correctly. Here's how to instrument JML the way it matters.
SAML vs OIDC vs SCIM — When to Use Which
A pragmatic guide for architects picking federation and provisioning protocols for enterprise identity.
The Zero Trust Blueprint Enterprises Actually Deploy
Zero Trust is not a product. It's an architecture of continuous verification — here's the reference blueprint I use for regulated enterprises.
19 years.
7 enterprises.
One discipline.
From IBM helpdesks to global bank architecture — a chronological record of the platforms I have built, broken and rebuilt.
Standard Chartered Bank (GBS)
- Lead design and delivery of IAM solutions supporting 4000+ applications and 125K+ user identities.
- Architect SAML / OAuth 2.0 / OIDC / SCIM / ADFS / MFA / RBAC / Zero Trust controls across Agile, DevOps and microservices.
- Performed STRIDE threat modeling, OWASP Top 10 & MITRE ATT&CK reviews; reduced access incidents by 25%.
- Drove gap analysis across GDPR, PCI-DSS and SOX; transformed JML lifecycle via SCIM automation, SailPoint IGA and BeyondTrust PAM.
Wipro Pvt Ltd
- Led DevOps and IDAM teams for NetIQ enterprise products across 300+ applications.
- Owned migration of Honeywell NetIQ stack from 4.0/4.5 → 4.7 with 100% uptime during cutover.
- Performance-tuned Access Manager, Identity Manager and eDirectory, reducing reconciliation delays by 35%.
- ServiceNow / PagerDuty incident management; authored SOPs, POCs, proposals and SOW documentation.
GBM Pvt Ltd
- Designed IAM solutions for Bahrain Ministry: 250+ applications, 50K+ identities.
- Delivered HA architecture for NetIQ Access Manager, Identity Manager, eDirectory — 99.45% uptime.
- Implemented SSO, SAML 2.0 federation, SSPR and secure authentication policies.
HappiestMinds Pvt Ltd
- Delivered IAM operations across Microsoft FIM/MIM and NetIQ IDM for 8+ clients, 300K+ identities.
- Integrated with Active Directory, HRMS DB, LDAP, SAP, SaaS, Exchange for provisioning and sync.
- RBAC automation drove an 85% reduction in manual access reviews.
Steria India Ltd
- Designed and supported Novell eDirectory, OpenLDAP, IDM, iPrint, ZENworks, BorderManager.
- Managed identity infrastructure for 3000+ users across India and Germany operations.
Novell Software Development
- Support and troubleshooting for Novell eDirectory, OpenLDAP, Identity Manager and iPrint.
- Contributed to process improvements and customer identity solution design.
IBM India Pvt Ltd
- Delivered L1 IT support and infrastructure management for LDAP, Windows, VOIP, Lotus Notes.
- Mentored engineers on technical and process issues; improved incident/problem management.
The foundation.
Bachelor of Computer Applications
Diploma in Electrical & Electronics
Credentials & badges.
A decade-plus of certified expertise across identity platforms, cloud, networks and frameworks.
AWS Certified Cloud Practitioner
Prince2 Practitioner
NetIQ Identity Manager Administrator (CNIDMA)
ITIL V3 Foundation
Certified Novell Engineer (CNE)
Certified Novell Administrator (CNA)
Certified Novell Data Center Specialist (CNDCS)
Suse Certified Linux Administrator (CLA)
Microsoft Certified Professional (MCP)
Cisco Certified Network Associate (CCNA)
Awards & achievements.
Consistently recognised for technical leadership, customer delight and zero-escalation delivery across global engagements.
Tech Wizard award for outstanding thought leadership
Going the Extra Mile (GEM) Award for exemplary performance
Spot Awards for zero-escalation project delivery and high customer satisfaction
Rising Employee award for individual technical support excellence
Best Team award for large-scale migration delivery
Best Employee of the Year — consecutive years
Let's architect
something secure.
Available for IAM/IGA/PAM architecture engagements, advisory and Zero Trust transformations.