TRACK B · Enterprise IAM / PAM / IGA Engineering
Implement, integrate, automate, govern, and secure enterprise identity infrastructure and access management systems. ---
Target roles
- IAM Engineer
- IGA Engineer
- PAM Engineer
- Workforce Identity Engineer
- Identity Security Engineer
- Enterprise Identity Engineer
Core domains
- D01 — Identity Fundamentals
- D02 — Authentication
- D03 — Authorization & Access Control
- D04 — Identity Protocols & Cryptography
- D06 — Workforce & Directory Identity
- D07 — Identity Governance & Administration (IGA)
- D08 — Privileged Access Management (PAM)
- D09 — Non-Human Identity (NHI)
- D11 — Identity Security & Zero Trust
Supporting domains
Career objective
Implement, integrate, automate, govern, and secure enterprise identity infrastructure and access management systems.
Suggested practice sequence
The following A/B outcome codes are optional learning scaffolds retained from v0.3. Framework v0.4 defines this track through target roles and core/supporting domains, rather than these outcome codes.
B01 · Workforce Identity Engineering
Active Directory, Entra ID, Kerberos, Windows Hello, SSO, hybrid identity
B02 · Identity Lifecycle & Provisioning
Joiner-Mover-Leaver, provisioning, reconciliation, SCIM, lifecycle workflows
B03 · Identity Governance
Access requests, approvals, certifications, segregation of duties, roles
B04 · Privileged Access Engineering
CyberArk, PAM, PIM, just-in-time access, rotation, sessions
B05 · Enterprise Identity Integration
REST APIs, webhooks, PowerShell, Python, directories and applications
B06 · Identity Security & Operations
Troubleshooting, audit, ITDR, Zero Trust, privileged access risk
Portfolio evidence
Use a technical explanation, implementation, architecture decision, security analysis or research artifact to demonstrate your competence. Connect each artifact to a question and its domains.