Marvin Rumbaua

Cybersecurity-focused IAM Analyst and IT Systems Administrator with 14+ years of experience securing enterprise environments through identity lifecycle management, SSO integration, audit readiness, and access governance. Proven ability to translate IAM business requirements into actionable technical solutions aligned with compliance standards such as SOX, NIST 800-53, CJIS, and HIPAA. Skilled in stakeholder engagement, IAM documentation, and risk remediation. Adept at collaborating across teams to implement secure authentication and authorization solutions using tools like Azure AD/Entra ID, Okta, Saviynt and Intune. 

Professional Experience

Information Security Analyst III
 Pfizer (formerly Seagen) – Bothell, WA
 Jan 2024 – Nov 2024

• Responded to security incidents involving account misuse; collaborated on remediation reporting.
• Analyzed user sign-in behaviors to identify identity-related risk trends.
• Assisted SOX-related IAM documentation, access reviews, and audit support for internal controls.
• Partnered with business units to improve onboarding security and access policies.
• Utilized Saviynt Identity Governance to support access certification campaigns and attestation processes, aligning with audit and compliance requirements.
• Participated in access modeling efforts in Saviynt, mapping entitlements and roles to support least-privilege enforcement and regulatory readiness.

IAM Administrator II
 Seagen – Bothell, WA
 Dec 2021 – Dec 2023

• Managed IAM lifecycle with Azure AD for 3,000+ users across regulated departments.
• Conducted functional access reviews and addressed ITGC issues in collaboration with audit teams.
• Automated provisioning/deprovisioning workflows using PowerShell and ServiceNow.
• Supported security teams in root cause analysis for privileged access misuse and anomalies.
• Integrated Saviynt IGA with core HR systems and business applications to streamline identity lifecycle processes, including joiner/mover/leaver workflows.
• Helped define role-based access control policies in Saviynt to support audit traceability and enterprise-wide access governance initiatives.

IAM / Systems Administrator
 Seagen – Bothell, WA
 Nov 2020 – Dec 2021

• Migrated enterprise identity architecture from Okta to Azure AD, enforcing MFA and SSO policies.
• Defined and implemented secure roles for application access in high-risk environments.
• Collaborated with Engineering and Compliance teams to align onboarding workflows with Zero Trust principles.

IT Support Specialist II / I
 Seagen – Bothell, WA
 Nov 2014 – Nov 2020

• Supported 700+ users across endpoint provisioning, password resets, VPN, and identity ticket resolution.
• Drafted SOPs and end-user documentation for account creation and revocation procedures.
• Assisted in disaster recovery exercises and incident response tabletop simulations.

Helpdesk Technician
 Gonzaga University – Spokane, WA
 Aug 2010 – May 2013

• Delivered technical support and access management services to faculty and students.

B.S. in Computer Engineering
 Gonzaga University – Spokane, WA (2013)