Jawad Laaguid

▪ Manage end-to-end identity lifecycle (provisioning, modification, deprovisioning) across global IT systems and business applications.

▪ Provision and control application access in line with RBAC model, security policies, and least-privilege principles.

▪ Act as primary point of contact for IAM-related requests and escalations; resolve incidents within SLA.

▪ Perform recurring access reviews and deactivate obsolete accounts to reduce attack surface.

▪ Troubleshoot authentication, federation and access integration issues across cloud and on-prem applications.

▪ Contribute to IAM process improvement, automation initiatives, and documentation; collaborate with application owners and IT teams to resolve complex access cases.

Environment : ServiceNow, JIRA, PowerShell, SailPoint, Active Directory, Microsoft Entra ,PuTTY

▪ end-to-end user provisioning and de-provisioning — account creation, role assignment, permission granting, and timely revocation for leavers and movers.

▪ Contributed to the successful rollout of an enterprise-wide RBAC model, improving access consistency and significantly reducing standing privileges across the application estate.

▪ Processed and validated access requests for systems, applications and sensitive banking data in strict compliance with internal security policies and approval workflows.

▪ Performed regular access reviews and recertification campaigns, removing outdated privileges to maintain banking-grade compliance and audit readiness.

▪ Aligned role assignment with job responsibilities to enforce least-privilege principles, minimising excessive or unauthorised access.

▪ Maintained detailed audit logs of access activities and user events to support internal audits and external regulatory requirements.

▪ Applied security best practices in authentication, authorisation, and identity-related compliance controls.

Environment & Tools: ServiceNow, Microsoft Entra ID, Active Directory, SailPoint, Okta, MFA, PAM

▪ Resolved complex technical issues escalated beyond L1 remote support, providing onsite intervention across offices and operational sites.

▪ Managed account creation, modification and deletion in SAP and Active Directory.

▪ Handled hardware lifecycle for joiners, movers and leavers — preparation, deployment, recovery.

▪ Maintained equipment inventory, ordered hardware, and ensured stock availability for ongoing operations.

▪ Documented incidents, resolutions and outcomes for knowledge management.

Environment & Tools: Salesforce, Remedyforce, Active Directory, Wireshark, SAP, Microsoft Intune, ITIL, Windows, Office 365