Andy Soto

Cybersecurity and IAM engineer focused on identity security and automation.

Andy Soto

Cybersecurity Engineer | Identity and Access Management
Arizona | AndySoto.com

Professional Summary

Cybersecurity engineer with more than 10 years of enterprise IT experience spanning identity and access management, infrastructure support, and security operations. Hands-on experience with Microsoft Entra ID, Active Directory, Okta, and privileged access management. Builds PowerShell and Microsoft Graph tools for access analysis, implements authentication controls, and supports audit evidence collection for identity security controls.

Professional Experience

Cybersecurity Engineer III (IAM) | Amentum

June 2025 to Present

  • Implement and maintain identity and access controls in enterprise hybrid environments, including Conditional Access, multifactor authentication, privileged identity management, and just-in-time access.
  • Develop PowerShell tools using the Microsoft Graph SDK to compare account access and inventory role assignments, with Excel reporting for investigations and access reviews.
  • Identify access discrepancies and excessive permissions, and coordinate remediation through established change management processes.
  • Configure application single sign-on and support authentication integrations across identity platforms.
  • Build privileged-access notifications and reporting using identity audit logs, Azure Monitor, and KQL.
  • Support SOX access reviews and provide identity security evidence for ISO 27001 audits.
  • Build Power Apps tools to standardize privileged-account and service-account access reviews.
  • Investigate security alerts and provide incident escalation support.

Cybersecurity Research and Professional Development

January 2023 to June 2025

  • Completed a Master of Science in Cybersecurity and Information Assurance.
  • Earned certifications in cybersecurity, Microsoft administration, and identity and access management.
  • Built a hybrid home lab to explore identity lifecycle management, authentication security, and enterprise integrations.

Identity and Access Management Engineer | GEICO

April 2022 to December 2022

  • Supported identity platforms and privileged access management on a cross-functional Agile Scrum team.
  • Resolved authentication, single sign-on, and access incidents, achieving a 95% resolution rate within SLA timelines.
  • Supported migration from legacy authentication to cloud multifactor authentication, improving security and reducing licensing costs.
  • Configured Conditional Access and just-in-time privileged access controls.
  • Helped application teams migrate federated authentication to Microsoft Entra ID.
  • Investigated directory changes and restored unintentionally modified or deleted objects.
  • Analyzed identity role assignments and validated access against job responsibilities and access policies.
  • Documented implementation steps, testing procedures, and rollback plans for identity changes.

Senior IT LAN Engineer | GEICO

May 2015 to April 2022

  • Provided enterprise hardware, infrastructure, software, and security support.
  • Resolved Windows client and server issues, account and mailbox requests, and directory-related incidents.
  • Configured file-share permissions and security groups using role-based access controls.
  • Verified new-associate access and configured equipment, reducing onboarding time by 33%.
  • Automated administrative tasks with PowerShell to improve system management and auditing.

Systems Testing Analyst | GEICO

May 2013 to May 2015

  • Resolved technical issues affecting sales, service, and underwriting applications.
  • Conducted user acceptance and regression testing for security and access-control changes.
  • Used SQL to identify qualifying test accounts, reducing test preparation time by 40%.

Technical Skills

  • Identity: Microsoft Entra ID, Active Directory, Entra Connect, Okta, Saviynt Identity, SSO, SAML, SCIM, MFA, Conditional Access, PIM, RBAC, ABAC, identity governance, access reviews.
  • Privileged access: Delinea Secret Server, BeyondTrust, privileged-account reviews, just-in-time access.
  • Automation and reporting: PowerShell, Microsoft Graph SDK, Python, SQL, KQL, Power Apps, Power Fx, Excel.
  • Platforms: Microsoft 365, Azure, Intune, Windows Server, Windows clients, Exchange administration, VMware vSphere.
  • Security and governance: Incident investigation, audit evidence, SOX, ISO 27001, NIST, CIS Controls, change management, UAT, regression testing.

Education

Master of Science, Cybersecurity and Information Assurance
Western Governors University

Bachelor of Science, Computer Information Systems
Bellevue University

Certifications

  • Microsoft: Microsoft 365 Certified: Administrator Expert; Identity and Access Administrator Associate; Azure Fundamentals.
  • Okta: Okta Certified Administrator; Okta Certified Professional.
  • CompTIA: SecurityX, CySA+, PenTest+, Security+, Network+, A+.
  • ISC2: Certified in Cybersecurity (CC).

Exam preparation: CISSP and CISM.

Technical Projects

**Hybrid Identity Home Lab January 2023 to Present**

Designed and deployed a hybrid lab integrating Windows Server, Windows clients, RHEL 9, Microsoft Entra ID, Microsoft 365, and Okta to study identity lifecycle management, authentication security, and enterprise integrations.

Updated: