Identity & Access Management
Authentication and authorization systems: SSO, MFA, RBAC/ABAC, and privileged access management.
Subject: Security · Roles: Identity and Access Management (IAM) Engineer
Concepts
SSO & Federation Protocols (SAML, OIDC)
How a user authenticates once with an identity provider and gets trusted access across many applications.
Multi-Factor Authentication Design
Combining independent authentication factors, and why some MFA methods are meaningfully stronger than others.
RBAC vs. ABAC Implementation
Assigning permissions via roles versus evaluating policies against attributes — the implementation tradeoffs of each.
Privileged Access Management
Extra controls around high-risk, elevated-privilege accounts — the accounts that matter most if compromised.
Identity Lifecycle & Provisioning
Automating account creation, access changes, and deprovisioning across a person's entire time at an organization.
Directory Services (LDAP, Active Directory)
The centralized store of identities, groups, and attributes that most enterprise authentication and authorization builds on.