Isidro Arzate

Senior IT Systems Engineer, Identity & Access Management

I automate the plumbing that decides who gets access to what.

7+ years building IT infrastructure and identity systems for organizations of more than 900 users.

Certifi­cations

Issued by Okta, the login system many companies use. Verify each on Credly, an independent registry, where both records read Sid Arzate.

  • Okta Certified Admin­istrator

    Managing Okta: access policies, accounts from hire to exit, single sign-⁠on and directories.

    Verify Administrator on Credly

  • Okta Certified Profes­sional

    Operating Okta day to day: supporting users, app sign-⁠in and setting up app accounts.

    Verify Professional on Credly

Administrator is the higher of the two.

Reach me on LinkedIn

About

Access decisions don't stay made. People join, change roles and leave, and every one of those changes has to reach every app it touches. I'd rather build the automation that handles it reliably than repeat it by hand, ticket after ticket.

Most of that tooling is Python; I switch languages when another one fits the job better. Outside the identity work, I build websites. I've also mentored and trained support staff, and helped build a training plan for associate systems administrators.

Work

Identity and access

Everyday Okta: managing cloud apps, access, automation, and catching errors early.

Tools
  • Okta
  • Okta Workflows
  • Active Directory
  • Terraform
  • Python
  • Single sign-⁠on (SAML, OIDC)
Automated account creation
I led the team modernizing user creation so it leaned less on the directory servers (Active Directory and OpenLDAP). I also automated account creation in the HR, finance and recruiting apps.
Automated offboarding
I led the team initiative to automate account decommissioning (shutting off access when someone leaves). Offboarding's automated steps, per-app steps and manual work became one process.
Okta settings in version control
I worked on keeping Okta's configuration in version control, with drift monitoring to catch changes made outside the code.
Cloud functions with Terraform
I wrote Terraform modules to build and deploy Google Cloud Functions (small cloud-hosted programs) and make them easier to maintain.

Devices, Atlassian and compliance

Mixed Mac and Windows fleets, the Atlassian suite (Jira and Confluence), and turning policy into enforceable controls.

Tools
  • Jamf
  • FleetDM
  • Intune
  • Jira
  • Confluence
  • ISO 27001
Zero-touch Macs
I set up zero-touch provisioning with Jamf and Apple Business Manager, so new Macs configure themselves without manual imaging, then moved it to FleetDM.
ISO 27001 controls
I turned the information-security standard's requirements into IT controls and documentation for a certification effort.
Atlassian to cloud
I managed the move of Jira and Confluence from server to cloud.