HARVINDER BUMRAH

• Lead design and operations of Microsoft Entra ID IAM services, managing secure access for enterprise applications and
cloud resources.
• Implement and maintain Conditional Access policies and MFA to reduce identity-based risks and improve security
posture.
• Deploy password less and phishing-resistant authentication methods to strengthen user authentication.
• Integrate applications using SAML and OpenID Connect, enabling secure Single Sign-On across SaaS and internal
systems.
• Configure RBAC at tenant, subscription, resource group, and storage levels to enforce least-privilege access.
• Manage lifecycle of SAML certificates, secrets, and tokens, ensuring timely renewals and compliance with security
standards.
• Implement SCIM-based user provisioning and deprovisioning to automate joiner-mover-leaver processes.
• Monitor risky sign-ins and identity protection alerts, performing investigations and remediation.
• Deliver Identity Governance processes, including access reviews and role assignments, to support audit readiness.
• Mentor IAM engineers, conduct technical reviews, and ensure adherence to operational procedures.
• Work with application owners, security teams, and business stakeholders to gather requirements and deliver IAM
solutions.

• Designed and supported Active Directory and Azure AD hybrid identity environments for Microsoft 365.
• Implemented and managed ADFS farms and standalone deployments for SSO access to enterprise applications.
• Migrated authentication from ADFS to modern methods using Password Hash Sync and Pass-through Authentication.
• Administered Azure AD Connect for directory synchronization and identity lifecycle management.
• Created and maintained Conditional Access policies aligned with security and compliance needs.
• Resolved complex SSO, federation, and trust issues between AD, Azure AD, and web applications.
• Handled escalations and coordinated with Microsoft support to restore critical IAM services.
• Led IAM operations for multiple lines of business, ensuring SLA, KPI, and service quality targets were met.
• Trained team members on identity technologies and operational processes to build internal expertise.
• Conducted performance reviews and implemented improvement plans to strengthen team delivery.

• Provided broadband and Wi-Fi router troubleshooting support to customers.
• Coordinated with field engineers for installation and issue resolution.
• Documented incidents and followed support workflows to ensure timely closure.

• Supported customers with modem, router, and billing issues.
• Guided users through basic network configuration and connectivity checks.
• Assisted in training new team members and sharing product knowledge.