Holger G.-IAM / IAG Expert

Business analysis / requirements engineering for the introduction of a central authorization platform:

• Analysis of existing requirements for the use of IGA solutions (NetIQ, MidPoint) in an existing IAM cluster
• Capturing requirements as epics and user stories (JIRA) to provide a comprehensive description of the use of an IGA solution for central access control across connected platforms and applications.
• Functional solution descriptions (Confluence) for various lifecycle processes, such as Identity Lifecycle (ILC), Role Lifecycle (RLC), Structure Lifecycle (SLC), and Application Lifecycle
• RBAC: Design of a role model in the IGA solution to automate access provisioning as much as possible, capturing application and business roles
• Approach for onboarding applications to the IGA tool, integrating Keycloak (ID Provider).
• Functions and processes for recertifying entitlement objects and roles, and for assigning / removing them from personalized identities.
• Functions and processes for audit-proof documentation and reporting of managed data and processes in the IGA / IAM environment.
• Planning, execution, and documentation of QA / testing for the 1st implementation phase of the MidPoint IGA solution in the IAM cluster.
• Planning a roadmap for the step-by-step testing and introduction of the IGA solution.

• Supported the IAM-PAM initiative from requirements evaluation and product selection through to solution implementation.
• Supported the project manager with planning and delivery using PMI and agile methods, as well as risk management.
• Managed stakeholders to ensure ongoing alignment on functional requirements and the project timeline (roadmap).
• Provided regular reports to management (LA).
• Documented project delivery and results in SharePoint, JIRA, and Confluence.
• Launched and planned the IAM-PAM requirements engineering project.
• Analyzed the organization's IAM maturity.
• Created an IAM-PAM service catalog as the basis for the requirements catalog.
• Conducted an IAM-PAM SWOT analysis (FIT – GAP to maturity level).
• Prepared a document of IAM-PAM requirements as the basis for a functional concept, including a roadmap for the next steps in delivering the overall initiative.
• Launched and planned the IAM product selection project.
• Prepared and aligned the IAM requirements specification as the basis for the product selection process, including process descriptions according to UML.
• Prepared and aligned tender documents for a two-stage selection process, including IAM specifications, a PoC plan, and an evaluation catalog.
• Supported the tender selection process, including PoC delivery, bidder evaluation, and preparation of a decision paper for product selection.
• Launched and planned the IAM implementation project for One Identity using a multi-phase model.
• Prepared and aligned the implementation specification for the IAM implementation.
• Aligned the enterprise architecture for the IAM target platform within the company.
• Supported test preparation in Xray and implementation of individual IAM processes.
• Supported the GoLive of the 1st implementation stage, including the HR interface and provisioning for WON.
• Structured the basic role model, taking SoD rules into account.

• Identified and initially gathered requirements for selecting, procuring, and using a central IAM solution for internal operations and for providing IAM services to customers of the municipal data center.
• Planned and delivered the workshop (online / offline), including an on-site workshop and further online sessions.
• Defined the goals for using a central IAM solution, identified the topics to be considered, and initially gathered organizational and functional requirements.
• Prepared a results document providing a detailed overview of goals, topics, and requirements for IAM use.
• Analyzed possible IAM architectures for use in the data center, taking into account the provision of IAM services to internal departments and external customers.
• Ensured compliance with current rules and SoD requirements for clear separation of duties when handling personal data.
• Proposed an approach for further evaluating and delivering the IAM initiative, including a preliminary study, PoC plan, and product selection process.

• Prepared an IAM preliminary study to assess feasibility and support product selection for the municipal utilities of a major city.
• Planned and conducted interviews with the relevant departments for an initial analysis of Identity & Access Management for customer access.
• Identified and documented topics and requirements for a central portal solution for the registration and authentication of (end) customers and partners.
• Prepared a report of findings covering requirements for the business organisation, IT organisation, processes and data security (compliance and IT Security).
• Created a longlist of potential IAM products for further evaluation and product selection, and recommended next steps.

• Prepared an IAM study to support product selection as part of a carve-out from the parent company.
• Planned and conducted an IAM maturity assessment of the group’s existing IAM functions and documented requirements for the future IAM setup in the independent company.
• Derived the minimum IAM requirements, taking into account compliance requirements in the future independent organisation.
• Prepared IAM requirements specifications, including processes (UML standards), and a longlist of potential IAM vendors.

• Designed and coordinated the implementation of bi-Cube IAM to increase the level of automation in user and access rights management.
• Coordinated organizational and technical requirements in a heterogeneous IT environment.
• Analyzed and designed IAM processes for implementation in the customer environment.
• Analyzed IAM target systems and designed the interfaces.
• Developed an approach for analyzing and modeling a basic and business role model, SoD, role risk analysis, and role lifecycle processes.
• Developed an approach for testing, acceptance, and rollout of IAM functions and interfaces.

• Planned and carried out measures from the IT Operations Automation Roadmap to increase the level of automation.
• Evaluated technologies and tools for implementing self-services and automating the installation of new workstations (AP) and software.
• Conducted PoC's for workflow automation and the use of a company-wide self-service portal.
• Prepared a project proposal, including cost-benefit analyses, for implementing and using self-services across the company.
• Planned and managed the automation of workstation (AP) and software installation using PMI methodology.
• Coordinated measures from the Automation Roadmap with a parallel project to implement an IAM system; supported IAM architecture.

• Designed and conducted IT Automation assessments.
• Planned and supported IT Automation projects and managed projects.
• Evaluated, planned, and managed IAM and SSO projects.
• Supported Pre-Sales.
• Designed and conducted internal training on IT Automation, IAM & SSO topics.

• Re-engineered an IAM implementation with Omada / FIM to replace existing IT maintenance tools.
• Consolidated and automated maintenance processes and implemented new automated provisioning interfaces.
• Set up a forward-looking roles and permissions model in IAM.
• Planned and led the project according to PRINCE2 principles.
• Aligned requirements in a heterogeneous IT environment.
• Prepared solution descriptions and documented the target processes (UML) and IAM architecture.
• Planned the budget and monitored cost and time budgets, with weekly status updates.
• Coordinated activities to implement software changes.
• Led project activities to support implementation, including risk assessment.
• Designed and conducted interviews for role analysis, taking SoD into account.
• Served as the point of contact for the client's project manager on issues and escalations.

• Provided a user self-service password change function for ADS (Windows) and RACF as an IAM portal feature in bi-Cube.
• Aligned requirements with business departments and IT service providers in a heterogeneous IT environment.
• Prepared solution descriptions for the required software changes.
• Planned the budget for implementing software requirements.
• Led and coordinated activities to implement software changes and support implementation.

• Gradual replacement of Sun IdM with bi-Cube IAM, integrating new target systems such as SAP.
• Use of a business role model, process automation, and decommissioning of Sun IdM for active provisioning.
• Evaluation and design of the IAM migration through workshops and a PoC.
• Budget planning for the implementation project.
• Project planning and management in a 2-phase plan.
• Organizational, role, and process modeling, including documentation (UML, SoD).
• Coordination of required change requests and classification as standard or customer-specific extensions.
• Support with testing and acceptance of the functional blocks, as well as the production deployment of bi-Cube.

• Use of the bi-Cube IAM system for approx. 700 sales units and use of Single Sign On with biometrics for the central service organization.
• Evaluation and design of IAM and SSO use through workshops and a PoC.
• Project and budget planning for the implementation according to PMI methodology, split into two sub-projects.
• Organizational, role, and process modeling (UML Standards, SoD).
• Coordination of required software changes with the client.
• Support with test preparation, testing, and acceptance of individual functional blocks.
• Project management, coordination, and coaching of internal and external project managers, as well as project controlling.

• Creation of a central overview of all existing permissions, with audit capabilities.
• Implementation of an approval process for access to critical customer data and support for an automated workflow engine.
• Analysis of the systems supplying data to the IAM, as well as the related maintenance processes.
• Solution description for the automated integration of systems for regular data synchronization.
• Analysis and description of IAM process models for approving access to critical customer data.
• Definition of reports for auditing permission data.
• Budget and project planning, as well as project controlling.
• On-site training for the client's employees.

• Introduced centralized user and access management with bi-Cube IAM for approx. 15.000 employees, with tenant separation.
• Managed internal and external employees as well as field staff, and developed an approach to role modeling.
• Managed access rights for ADS and RACF and provided a data hub for a central Notes DB.
• Automated processes and analyzed workflows across various group companies.
• Prepared functional specifications in coordination with IT service providers, Group Audit, IT Security, and HR.
• Planned the budget and coordinated software customizations.
• Supported testing, documentation, and production deployment.

• Introduced a test tool (Test Director) to support software testing.
• Used the tool to test in-house online banking developments.
• Prepared a plan for introducing the tool to support the preparation, execution, and documentation of software tests.
• Led software tests for development projects.

• Head of the business unit for customer projects and support, as well as multi-project management.
• Project planning and management for the evaluation and implementation of IDM and SSO systems.
• Consolidation of role and process models in the context of organizational policies.
• Establishment of customer support with controlling according to maintenance contracts and SLAs for managed services.
• Establishment and development of the unit responsible for programming web applications for the IAM product.
• Establishment and development of the QA/testing unit and the required processes for requirements and error management.
• Design and implementation of tools for order and version management, as well as test management.
• Development of software for MS Access, VBA and ASP.
• Disciplinary personnel responsibility and operational responsibility for incident and problem management.