Florent Bikandou

ISC, Confluence

• • Design and review of access models for integrating applications into SailPoint ISC to automate the granting, modification, and revocation of access according to user roles and responsibilities.

• • Formalization of access management rules by applying the principles of least privilege, separation of duties (SoD), and Zero Trust to reduce excessive access and improve compliance.

• • Preparation and support of access certification campaigns, with detection of unauthorized access, orphaned accounts, and discrepancies between authoritative sources and SailPoint.

• • Documentation of IAM processes, JML lifecycle rules, access standards, and functional requirements to support identity governance, decision traceability, and access control quality.

• • Contribution to the improvement of access governance models, including roles, responsibilities, granting/revocation rules, recertification, and alignment with Zero Trust, NIST, and ISO 27001 principles.

IdentityIQ, PowerShell, Visio, Jira, Confluence

• • Design of RBAC access models for Windows, Linux, AIX, Oracle, and MS SQL environments in SailPoint IIQ, in alignment with business roles, Zero Trust principles, and compliance requirements.

• • Contribution to access administration and governance by defining conditions for granting and revoking access, as well as privileges required by function.

• • Analysis of discrepancies between existing access models, business needs, and compliance requirements to recommend adjustments to IAM roles, privileges, and controls.

• • Writing technical specifications for custom API connectors and coordinating with technical teams to ensure IAM data integrity.

• • Facilitating workshops with security, audit, infrastructure, and GRC stakeholders to review access models and matrices in a regulated context, taking into account IAM controls inspired by NIST and ISO 27001.

• • Analysis and translation of business needs into IAM functional requirements for the integration of corporate applications into SailPoint IIQ.

• • Participation in the definition of roles, privileges, and access processes, supporting the principles of least privilege, Zero Trust, and access governance.

• • Documentation of functional and technical requirements related to Entra ID, roles, permissions, access processes, and governance controls to support application integration and continuous improvement of IAM practices.

• • Participation in user acceptance testing (UAT), continuous improvement of IAM processes, and maintenance of up-to-date documentation for stakeholders.

• • Coordination of workshops with PMs, architects, application vendors, and internal clients to translate business needs into IAM requirements, define roles and permissions, and support privileged access control, PIM, and Zero Trust principles.