Shivam Tiwari
Microsoft Certified Identity & Access Management Engineer · Cloud Security Architect
7+ years of experience securing digital identities, designing Zero Trust security architectures, modernizing hybrid enterprise environments, and streamlining identity governance. Passionate mentor helping engineers master Microsoft Entra ID, Azure, AWS, and production IAM.
Engineering Identity at Scale
Throughout my career as an Identity and Access Management engineer, I have architected and deployed enterprise-scale identity solutions spanning Microsoft Entra ID (Azure Active Directory), hybrid Active Directory forests, multi-cloud federation, and automated life-cycle workflows.
Real-world security incidents rarely stem from a lack of tooling; they stem from subtle misconfigurations in Conditional Access policies, forgotten legacy authentication endpoints, over-privileged permanent roles, or misaligned federation claims.
Through CloudKnowledge, I document reproducible architecture blueprints, troubleshooting methodologies, and hands-on lab exercises that teach engineers how production IAM works under the hood.
Areas of Core Expertise
Microsoft Entra ID & AD
- • Entra ID Tenant Architecture
- • Privileged Identity Management (PIM)
- • Entitlement Management & Access Reviews
- • Hybrid Sync (Entra Connect / Cloud Sync)
- • Active Directory Domain Services & Kerberos
- • Administrative Units & Delegated Admin
Federation & Zero Trust
- • SAML 2.0 & WS-Federation SSO
- • OAuth 2.0 & OpenID Connect (OIDC)
- • FIDO2 WebAuthn & Passwordless Auth
- • Granular Conditional Access Policies
- • Continuous Access Evaluation (CAE)
- • Identity Threat Detection & Response (ITDR)
Multi-Cloud & Scripting
- • Microsoft Azure RBAC & Managed Identities
- • AWS IAM & IAM Identity Center
- • Google Cloud Workload Identity
- • Microsoft Graph PowerShell SDK v2
- • Automated SCIM App Provisioning
- • Enterprise Break-Glass Architectures
Handcrafted Certification Guides
Admins and engineers who run Microsoft Entra ID day to day. The core IAM certification.
Senior engineers moving into security architecture. Expert-level and case-study heavy.
Practitioners with some hands-on experience who do this work day to day.
Practitioners with some hands-on experience who do this work day to day.
Entry-level security professionals. SY0-801 (V8) launches Nov 17, 2026; SY0-701 stays available until June 11, 2027.
Senior engineers and architects.
Connect with Shivam
Have an IAM architectural question, feedback on our lab simulations, or looking to collaborate? Feel free to reach out directly.