// IAM & Systems Engineer
Tony Kha Tang
IAM & Systems Engineer with 4+ years architecting secure identity fabrics for high-growth environments. Specialized in Okta, M&A identity integration, and automating lifecycle management for 700+ users across North & South America.
01 — About
Identity as infrastructure.
Security without friction.
What I Do
I architect secure identity fabrics and automate the systems that keep companies running — from IAM strategy and MDM migrations to M&A integrations and SOC 2 compliance. I bridge the gap between security and operational efficiency.
What I'm Looking For
A senior or lead IAM/IT engineering role with real ownership — shaping identity architecture, leading automation strategy, and building the infrastructure layer at a company that's scaling fast.
My Approach
Automate the toil, document everything, design for scale. I bias toward RBAC over ad-hoc access, SCIM/API over manual provisioning, and outcomes over activity.
Currently Exploring
Zero Trust architecture, advanced Okta Workflows, cross-platform MDM unification, and using AI tooling to cut mean-time-to-resolution across IT operations.
02 — Impact
Results, not responsibilities.
03 — Systems
The stack I own.
04 — Experience
Where I've built.
- Architected the identity foundation for scaling from 50 to 600 employees — built end-to-end Lifecycle Management using Okta Workflows, integrating HRIS with Slack, Zoom, and Google Workspace via SCIM and API
- Executed IAM strategy for two major company acquisitions, migrating external tenants (Google/O365) and device fleets into the central ecosystem with zero downtime for 400+ users
- Manually transitioned 400+ macOS/iOS devices from JumpCloud to Kandji via Apple Business Manager, recreating all device profiles and MDM policies for centralized fleet management
- Led enterprise deployment of 1Password to 600+ distributed team members across North & South America — configured Okta integration for automated provisioning and enforced RBAC policies for vault access
- Served as Team Lead, delivering prompt solutions and proactive troubleshooting for complex infrastructure issues
- Documented all supported systems and applications to effectively train new and existing team members
- Identified improvement areas through systematic review of company systems to consistently enhance business efficiency
- Managed data mapping and directory integration projects to facilitate smoother client onboarding and data migration
05 — Projects
Selected case studies.
Approach: Meticulously mapped identity attributes across directories, staged directory syncing, and phased the device fleet transitions to eliminate single points of failure.
Approach: Architected end-to-end LCM using Okta Workflows triggered from HRIS. Integrated Slack, Zoom, and Google Workspace via SCIM and API for automated provisioning and deprovisioning.
Approach: Enrolled devices via Apple Business Manager, recreated all device profiles and MDM policies in Kandji, and executed a phased rollout by department.
Approach: Led full enterprise deployment of 1Password, configured Okta integration for automated provisioning, and enforced RBAC policies to govern vault access by role and team.
06 — Contact
Let's build something worth owning.
Open to senior IAM, IT engineering, or infrastructure leadership roles. Based in DC — willing to relocate.