Identity & Security Systems Practitioner · IAM/PAM · Security Automation
I am an identity and security systems practitioner with 7+ years of enterprise infrastructure, IAM/PAM, and security operations experience across regulated, high-availability environments in Singapore. My operational foundation includes CyberArk PAM, Active Directory, Entra ID, regulated infrastructure, and CyberTrust Mark / ISO 27001 ISMS delivery.
My current work turns the durable identity problems—authentication, authorization, privilege, delegation, and auditability—into deterministic, inspectable automation using Clojure, Babashka, EDN, OPA/Rego, and CI/CD controls.
I am extending this foundation into workload identity and controlled automation: making access explicit, time-bounded, revocable, and auditable as systems become more distributed.
| Repository | What it demonstrates |
|---|---|
| 🚦 identity-policy-as-code | OPA/Rego IAM gates over Terraform plans, denying wildcard permissions and unsafe inline policies. |
| 🔍 idira-audit-clj | Babashka/Clojure PAM audit CLI: orphaned privilege, dormant accounts, missing MFA, and stale tokens via SCIM/OAuth2 APIs. |
| 🛡️ security-tools | Babashka/Clojure security automation for findings, access reviews, PAM requests, and IAM workflows. |
| 🔒 pdpa-sg-clj | Singapore PDPA and secret-exposure scanning for repositories and pipelines. |
| 🧪 aur-audit | Linux supply-chain inspection for obfuscated payloads and suspicious build behavior. |
| 🇸🇬 mcpf-adapter | Babashka CLI for structured Singapore MyCareersFuture job data. |
- IAM/PAM: CyberArk vaulting and session recording; Active Directory and Entra ID; least-privilege access control.
- Security operations: IBM Guardium DAM, Carbon Black EDR, Tenable Nessus, high-availability infrastructure support.
- Compliance: CSA CyberTrust Mark Promoter Tier delivery; ISO 27001 Annex A ISMS execution.
- Automation: Clojure/Babashka, EDN, OPA/Rego, Python/Bash, GitHub Actions, GitLab CI, Linux, containers.
Technical writing and architecture notes are published at nurazhar.com, including secure automation and agentic systems, Replacing Imperative Scan Code with Rego, I Built a PAM Audit CLI to Learn Identity the Hard Way, and the full archive.
I am available for IAM/PAM, identity operations, security automation, and infrastructure-security roles.
- Website: nurazhar.com
- Email: career@nurazhar.com
- LinkedIn: linkedin.com/in/nur-azhar