Nathaniel Lewis
Identity & Access Management (IAM) Leader
Infrastructure & Zero Trust Architecture
Rock Hill, SC · Charlotte metro · Open to remote or hybrid
Key skills
- Identity Lifecycle Management
- User Access Reviews
- SOC 2 Compliance
- Segregation of Duties
- Privileged Access Management
- Team Leadership & Coaching
Who I Am
I govern who gets access to what — provisioning, managing, and reviewing user access across enterprise environments and resources. I started on the infrastructure team, administering Dynamics 365, Dell Boomi, Azure DevOps, and the service accounts behind them, then led IAM for 3,500+ users across multiple enterprise platforms. I use AI tools, including Claude, to conduct access reviews and risk analysis of end-user security role assignments as a core part of identity governance. Alongside my IAM career, I take on freelance architecture work — designing, deploying, and running secure infrastructure end to end for clients — to keep my skills current and test new technology against real requirements. AI isn’t a bullet point on my resume. It’s a force multiplier I use every day, with me making every call.
Skills & Tools
Identity Governance
- User provisioning & deprovisioning
- Joiner-mover-leaver (JML) lifecycle
- User access reviews & access certification
- Role-based access control (RBAC)
- Segregation of duties (SoD)
- SOC 2 compliance & audit support
- Least-privilege access design
- Service account governance
Platforms
- Oracle Fusion
- Microsoft Dynamics 365
- Delinea PAM
- One Identity
- SharePoint
- Microsoft Entra ID (Azure AD)
- Microsoft 365 & Exchange Online
- Azure DevOps
- SAP Business One · SAP R/3
Automation & Data
- PowerShell scripting
- SQL querying & reporting
- Dell Boomi integration
- AI-assisted access & risk analysis
Infrastructure & Security
- Cloudflare Zero Trust (Tunnel, Access, Workers, Turnstile)
- Docker & container hardening
- Portainer (container management)
- Uptime Kuma (service monitoring & alerting)
- Email authentication (SPF, DKIM, DMARC)
- Backup & disaster recovery
- Incident response & root cause analysis
Leadership
- IAM team lead & people manager (team of six)
- Coaching & development plans
- SOP & process documentation
Experience
Independent Solutions Architect
CurrentI put new technology into production instead of reading about it. Freelance client work and my own ventures — ConnectivityPros.net, CV Snapshot, and BizSnapshot — give me live environments to apply current tools to real business requirements. I designed, built, and launched SonjaWhiteNP.com end to end, from domain registration through Cloudflare configuration, and I’m now running user acceptance testing (UAT) on a self-hosted electronic medical records platform for a healthcare practice. I also built and run this site: a Hugo static site in a locked-down container with no admin rights, behind Cloudflare Zero Trust, with zero open ports. I build all of it on the same least-privilege principles I enforced in enterprise IAM.
Manager – Identity & Access Management (IAM)
2022 – 2026Governed the joiner-mover-leaver identity lifecycle across Oracle Fusion, Dynamics 365, Delinea PAM, SharePoint, and One Identity. Ran monthly, quarterly, and ad hoc user access reviews, enforced segregation of duties (SoD), supported SOC 2 audits, and cut provisioning time 30% through automation — while leading, coaching, and developing a team of six IAM professionals.
Also held
- Dynamics 365 Systems Administrator (Infrastructure Team) — service accounts, Dell Boomi user administration, Azure DevOps2020 – 2022
- ERP Consultant – SAP Business One2019 – 2020
- Senior ERP Administrator – SAP Business One2018 – 2019
- SAP R/3 Administrator2017 – 2018
- SAP Business One Administrator2013 – 2017
What Sets Me Apart
AI — In Practice
Certified on 8 AI platforms — Claude, ChatGPT, Gemini, Copilot, DeepSeek, Midjourney, Stable Diffusion, and Jasper AI — and holder of the Google AI Professional Certificate. I use them to analyze workforce data, build automation logic, develop SOPs, and extract coaching insights — not to generate cover letters.
Infrastructure — Applied
I build and operate production infrastructure: three NAS nodes, 20+ hardened Docker containers managed through Portainer, uptime monitoring, Zero Trust remote access, and zero open ports. Same engineering discipline as the enterprise, no IT department required.
See the lab →By The Numbers
Recent Work
Recent builds from my own infrastructure — each written up in full, problem to outcome.
Documentation portfolio: 24 documents, on request
Field notes, runbooks, standards, audits and IAM templates from June to October 2026, written as I work. Hiring teams can request 14-day reviewer access.
Incident response: containers down after an OS update
Traced two site outages to a vendor ACL layer, restored service in about an hour, and hardened every web container to a common baseline.
Four-site CMS migration, zero data loss
Retired a WordPress multisite: three sites rebuilt as static Hugo sites, one moved to an isolated instance, each cut over after a Zero Trust preview.
Production-grade EHR evaluation
Deployed OpenEMR behind Cloudflare Tunnel and Access with enforced MFA, encrypted off-site backups, and monthly restore tests. A gate check caught two access-policy errors before they reached production.
What I’m Looking For
I’m looking for a role where leadership means building teams, not managing headcount — an organization that hands me hard problems and expects results, not status updates. I’ve spent 13+ years turning identity chaos into governed systems and turning individual contributors into a team that runs. I want to keep doing both.