SailPoint IdentityIQ
Deployment and configuration, entitlement management, role provisioning with custom Beanshell and Java rules, and certification campaigns.
Services · Secure, automate, build
Secure who has access. Automate the busywork.
Hire ZyMoProfit for an identity and access management project, or for web scraping, data extraction and workflow automation. Every project starts with a free fit call, uses read-only access wherever reading is enough, and makes no changes to live accounts without your approval.
2
Service lanes:
IAM and automation
IAM and automation
0
Live changes
without your yes
without your yes
1
Free fit call
to start
to start
Lane 01 · Identity and access management
Clean up who can access what.
Access tends to pile up: people change roles, leave, or get admin rights "just for now." I help you find it, fix it with your approval, and keep it tidy.
01
02
Joiner, mover and leaver cleanup
Automated onboarding and offboarding, bulk provisioning and deprovisioning with Python and PowerShell, and removal of access people no longer need.
03
Microsoft 365 and Google Workspace access reviews
A clear picture of who holds admin rights, which accounts are stale, and what is shared outside your organization, with fixes you approve one by one.
04
Least-privilege and access audits
Role-based access, privileged accounts, inactive service accounts and policy violations, mapped to frameworks such as SOX, PCI-DSS, NIST 800-53 or GDPR when you need them.
05
AWS and Azure IAM
Reviews of cloud roles, policies and permissions, with Microsoft Entra ID, Active Directory and LDAP in the picture.
06
Identity integrations
Connecting identity systems to each other and to HR sources such as Workday, validating REST API connections, and bringing privileged access tools such as CyberArk into the process.
How an IAM project works
01
Free fit call
Tell me what worries you
We talk through your systems, who manages access today, and what you want cleaned up first. If it isn't a fit, I'll tell you.
02
Read-only review
I look before anything changes
Using read-only access that you grant, I map who has access to what and write up the risky spots. You complete any sign-ins yourself, and passwords are never shared in chat.
03
Approved fixes
Changes happen only with your yes
Each change is listed for your approval before it is made, and you get a record of what changed and why.
Lane 02 · Scraping, extraction and automation
Get the data. Skip the copy‑paste.
If you collect the same information by hand or move it between apps every week, a scraper, an API pull or an automated workflow can do it for you, with you approving anything that sends, posts or changes data.
01
Web scraping and data extraction
Python scrapers that collect public or authorized data into clean spreadsheets, CSV or JSON, ready for the tools you already use.
02
API data pulls
Pulling data from several REST APIs and combining it in one place, so you stop copying between tabs.
03
Workflow automation with n8n and Zapier
Connecting the apps you already use, moving data between them, and routing anything risky to you for approval.
04
RPA for repetitive steps
Rule-based browser and desktop automation for tasks that follow the same steps every time.
05
Read-only reporting automations
Scheduled reports and dashboards that only read your data and never change it.
06
Scripts and small tools
Python and PowerShell scripts, and simple Streamlit apps for browsing the results.
Responsible scraping
Public or authorized data only, within the rules.
Every scraping project respects each site's terms of service and its robots.txt rules, and collects only public data or data you are authorized to access. Request rates stay polite, and logins, paywalls and captchas are never bypassed. If a site doesn't allow it, I'll tell you and suggest an alternative, such as an official API or a data export.
How an automation project works
01
Free fit call
Tell me what you want collected or automated
We go through the sources, the output you need, and where it should land. We also check each site's terms before anything is built.
02
Build and sample
You check a sample first
I build it and run it on a small sample, so you can confirm the output is right before it runs at full size.
03
Handover
It runs only after you approve
Nothing runs on a schedule until you approve it. You keep your own accounts and pay any subscriptions directly.
Background
Hands-on security and automation work.
ZyMoProfit is about solving problems: secure, automate, build.
Work I have done
- Deployed and configured SailPoint IdentityIQ, managed entitlements, and wrote Beanshell and Java rules to automate role provisioning.
- Automated joiner, mover and leaver processes, and bulk provisioning and deprovisioning with Python and PowerShell.
- Supported access reviews, policy violation analysis and certification campaigns, and implemented role-based access policies.
- Built automation that pulls data from several security tools through REST APIs into one tracked process.
- Built a Python web scraper with a Streamlit interface that collects and surfaces OWASP Top 10 vulnerability data.
Environments
AWS and Azure, with work in environments regulated under SOX, PCI-DSS, NIST 800-53 and GDPR.
FAQ
Questions, answered.
Do you need my passwords?
No. Passwords and codes should never be shared in chat. Wherever a sign-in is needed, you complete it yourself. I ask only for the access the job requires, and read-only access wherever reading is enough.
Will you scrape any website I name?
Only when it is allowed. I check the site's terms and robots.txt rules first, and collect only public data or data you are authorized to access. If scraping isn't allowed, I'll suggest another route, such as an official API or an export.
Can you change things in my accounts?
Only with your approval. Reviews and reports use read-only access. Any change to a live account, such as removing access or turning on an automation, is listed for your yes before it happens.
Who pays for the tools?
You keep your own accounts and pay any subscriptions directly, such as n8n, Zapier or cloud services. Nothing is bought on your behalf.
What happens on the free fit call?
We talk through what you need secured or automated, what you would tackle first, and whether it is a fit. There is no obligation, and pricing is discussed on the call.
Get started
Tell me what needs securing or automating.
Pick a lane, or just describe the problem. I'll give you an honest answer on whether I can help.
Email moprofitz@mail.grokbot.com or find me on X at @ZyMoProfit.