Oussama KANBOUA

●      Lead the Group Directory (Ping DS – LDAP), the group's central identity repository (internal, external, partners, generic accounts), underpinning Okta SSO provisioning ●      Oversee the IAM ecosystem and associated APIs (SGID, AGM, APIs exposed via Axway APIM — OAuth2, API key, external IdP), ensuring run operations and business evolutions ●      Lead end-to-end the onboarding automation project (internal/external): account creation, Active Directory, mailbox, O365 licensing — deployed across multiple countries, targeting a Worldwide rollout in 2027 ●      Lead the IAM workstream of the Workday deployment (new group HR solution): provisioning flows and Okta authentication policy ●      Deliver SSO integrations for group applications in Okta, via the SAML2 and OpenID Connect (OIDC) protocols ●      Lead the automated offboarding project (HR event detection, account deactivation, license revocation, ServiceNow notification via API), deployed across more than 50 countries, targeting a Worldwide rollout by end of 2026 ●      Coordinate with development teams (applications & APIs) and the Talend team on the technical delivery of IAM requirements, and prioritize the backlog of the offshore IAM team in India ●      Own the IAM projects backlog in Jira ●      Oversee HR and organizational data flows (Talend, Snowflake fed by EBX) ●      Author all functional and technical specifications and design solution diagrams (Visio, LucidChart) ●      Run projects in compliance with security requirements (Security Officers): workshops, UAT, training, support documentation

●      Lead the design of IAM models for merger & acquisition (M&A) operations, ensuring smooth integration of new entities ●      Support HR teams in merging identity repositories during these integrations ●      Gather and challenge functional requirements with Onshore and Offshore development teams ●      Design and maintain connectors between SAP IDM 8.0 and the group's application ecosystem ●      Coordinate the Roles & Authorizations, Production and Development teams throughout the project lifecycle ●      Lead testing and validation phases through to production deployment ●      Train Key Users, Super Key Users and Business Process Owners (BPOs) on IAM solutions and processes ●      Design and validate the business role matrix and the Business Role Catalogue, in strict compliance with Segregation of Duties (SOD) rules ●      Ensure identity data quality across the group's systems, through control and review of critical business roles

●      Work on a migration project to SailPoint IIQ ●      Facilitate requirement-gathering workshops with business teams and design identity lifecycle management workflows ●      Author key project deliverables: functional specifications, test scripts (UAT), workshop minutes ●      Challenge existing IAM processes to anticipate risks and propose concrete improvements ●      Perform functional acceptance testing and ensure rigorous tracking of alert points

● Gather functional requirements from Onshore and Offshore teams and design SAP IDM 7.2 connectors ● Coordinate the Roles & Authorizations, Production and Development teams, from design through to production deployment ● Train Key Users, Super Key Users and BPOs, and provide hypercare support to General Managers during pre/post Go-Live phases ● Design and validate the business role matrix and the Business Role Catalogue, in compliance with SOD rules ● Analyze identity data quality and control critical roles across systems

● Analyze requirements, define the specifications, and model the solution (Merise, UML) ● Develop and deploy the ADSL subscriber migration tool for the NRA MED, then train end users ● Design a QR-code-driven visualization mockup for transmission room floor plans (PHP, MySQL, AutoCAD 3D) ● Improve reliability of the subscriber database and support equipment rollouts (Huawei)