Vijay Gaikwad

Built PowerShell, Microsoft Graph API, and Power Automate workflows to support bulk group creation and assignment, access reporting, and lifecycle notifications. Implemented security-approved service account governance with scoped permissions, API tokens, and managed credential storage for an approved integration. Focused automation on repeatable, auditable identity operations with controlled non-interactive access.

Ran recurring access reviews and audits for terminated accounts older than 90 days and inactive accounts, and addressed hybrid identity password-expiry/synchronization exceptions across multiple domains and tenants. Produced removal lists and change tickets, coordinated user outreach, and tracked closure evidence. Used the outputs to remediate account and access control gaps in an audit-ready way.

Reviewed PIM-managed administrative groups and directory role assignments across tenants to identify the minimal Entra role needed for external collaboration domain administration. Documented changes to remove standing Global Administrator dependency and shift toward eligible, time-bound access. Focused on least-privileged access controls to reduce risk while preserving required operational capability.

Analyzed dependency relationships for rescoping a dynamic application group, including dynamic group claims, SCIM provisioning links, Conditional Access references, group nesting, and Azure role assignments. Separated access paths for full-time employees versus contractors and aligned the enterprise application with an identity governance access package. Supported safer membership changes by validating that dependent permissions and provisioning behaviors remained consistent.

Standardized SAML 2.0 SSO across multiple SaaS organizations using Microsoft Entra enterprise applications with organization-specific entity IDs and reply URLs. Seeded access groups from source member lists and mapped NameID/claims to ensure correct My Apps IdP-initiated login behavior. Resolved a My Apps redirection issue by fixing an incorrect or missing relay-state URL and created service-desk runbooks to support rollout.

Administers Microsoft Entra ID and Microsoft 365 across multiple production tenants, managing user and group lifecycle, enterprise applications, app registrations, service principals, licensing, and directory role/application assignments. Configures and troubleshoots SAML 2.0 SSO federation, including entity IDs, ACS/reply URLs, and certificate renewal, and supports SCIM and JIT provisioning. Operates PIM-based privileged access and performs identity governance tasks such as access reviews, entitlement management, and joiner-mover-leaver lifecycle remediation while automating IAM workflows using PowerShell and Microsoft Graph.

Provides Microsoft 365 identity operations support, including Microsoft Entra ID and Active Directory troubleshooting, user and license administration, group access management, and access issues across Exchange Online, Microsoft Teams, and SharePoint Online. Investigates authentication and authorization incidents involving SSO, MFA, and directory synchronization, coordinating with third-party SaaS teams for login failures. Performs joiner-mover-leaver support for account provisioning/deprovisioning and permission/licence changes, and also supports Linux environments via log analysis, service recovery, and escalation.

Supports Active Directory and Microsoft 365 identity administration, including user lifecycle management, account enablement/disablement, security group membership, password resets, and mailbox access and permissions. Assists with onboarding/offboarding and access requests by validating roles and permissions, and troubleshoots domain authentication, account lockouts, password expiry, and Exchange Online sign-in issues. Administers Linux and Windows Server systems, including core networking services such as DNS and DHCP, and manages user/group permissions, services, and SSH access.

Delivers level 1 support for Windows and Linux account access, handling password and permission issues and troubleshooting application access problems. Performs user and group administration, reviews logs, documents tickets, and escalates incidents as needed. Maintains access and basic operational troubleshooting for account and application-related support requests.