Nathaniel Lewis
Identity & Access Management (IAM) Manager
Rock Hill, SC · Charlotte metro · Open to remote or hybrid
Key skills
- Identity Lifecycle Management
- User Access Reviews
- SOX Compliance
- Segregation of Duties
- Privileged Access Management
- Team Leadership & Coaching
Who I Am
I govern who gets access to what — provisioning, managing, and reviewing user access across enterprise environments and resources. I use AI tools, including Claude, to conduct access reviews and risk analysis of end-user security role assignments as a core part of identity governance. Most recently, I managed access for 3,500+ users across multiple enterprise platforms. Today, as a Solutions Architect, I design and run production-grade infrastructure for clients with the same discipline I brought to the enterprise. AI isn’t a bullet point on my resume. It’s a tool I use every day.
Skills & Tools
Identity Governance
- User provisioning & deprovisioning
- Joiner-mover-leaver (JML) lifecycle
- User access reviews & access certification
- Role-based access control (RBAC)
- Segregation of duties (SoD)
- SOX compliance & audit support
- Least-privilege access design
Platforms
- Oracle Fusion
- Microsoft Dynamics 365
- Delinea PAM
- One Identity
- SharePoint
- Microsoft Entra ID (Azure AD)
- Microsoft 365 & Exchange Online
- SAP Business One · SAP R/3
Automation & Data
- PowerShell scripting
- SQL querying & reporting
- Dell Boomi integration
- AI-assisted access & risk analysis
Infrastructure & Security
- Cloudflare Zero Trust (Tunnel, Access, Workers, Turnstile)
- Docker & container hardening
- Email authentication (SPF, DKIM, DMARC)
- Backup & disaster recovery
- Incident response & root cause analysis
Leadership
- IAM team lead & people manager (team of six)
- Coaching & development plans
- SOP & process documentation
Where I Work
Solutions Architect
CurrentDesigning and running secure client web infrastructure end to end — domains, Cloudflare Zero Trust, serverless intake, Microsoft 365, and Stripe billing — on the same least-privilege principles I applied in enterprise IAM.
Manager – Identity & Access Management (IAM)
2022 – 2026Governed the joiner-mover-leaver identity lifecycle across Oracle Fusion, Dynamics 365, Delinea PAM, SharePoint, and One Identity. Ran monthly, quarterly, and ad hoc user access reviews, enforced segregation of duties (SoD), supported SOX compliance audits, and cut provisioning time 30% through automation — while leading, coaching, and developing a team of six IAM professionals.
Also held
- Dynamics 365 Systems Administrator · 2020 – 2022
- ERP Consultant – SAP Business One · 2019 – 2020
- Senior ERP Administrator – SAP Business One · 2018 – 2019
- SAP R/3 Administrator · 2017 – 2018
- SAP Business One Administrator · 2013 – 2017
What Sets Me Apart
AI — In Practice
Certified on 8 AI platforms — Claude, ChatGPT, Gemini, Copilot, DeepSeek, Midjourney, Stable Diffusion, and Jasper AI — and holder of the Google AI Professional Certificate. I use them to analyze workforce data, build automation logic, develop SOPs, and extract coaching insights — not to generate cover letters.
Infrastructure — Off the Clock
I run a production-grade home lab — two NAS nodes, 20+ hardened Docker containers, Zero Trust remote access, and zero open ports. The same engineering discipline, no IT department required.
See the lab →By The Numbers
Recent Work
Recent builds from my own infrastructure — each written up in full, problem to outcome.
Incident response: containers down after an OS update
Traced two site outages to a vendor ACL layer, restored service in about an hour, and hardened every web container to a common baseline.
Four-site CMS migration, zero data loss
Retired a WordPress multisite: three sites rebuilt as static Hugo sites, one moved to an isolated instance, each cut over after a Zero Trust preview.
Serverless, least-privilege form handling
Replaced three plugins with a Cloudflare Worker: server-side Turnstile, header-injection protection, and a scoped, time-boxed deploy token.
What I’m Looking For
I’m looking for a role where leadership means building teams, not managing headcount — an organization that hands me hard problems and expects results, not status updates. I’ve spent 13+ years turning identity chaos into governed systems and turning individual contributors into a team that runs. I want to keep doing both.