0% Complete
6-Month Intensive Program

IAM/PAM MASTERY PROGRAM

From Practitioner to Enterprise Architect

26
Weeks
3
Certifications
24+
Labs
$150K+
Target Salary

Skills You Will Master

SailPoint IIQ/ISC
CyberArk PAS/Conjur
Okta Identity Cloud
Azure AD/Entra ID
Zero Trust Architecture
SAML/OAuth/OIDC
PowerShell/Python
REST APIs/SCIM
SOX/GDPR/SAMA
ISO 27001

Your Baseline Assessment

Strong (Leverage) Moderate (Enhance) Gap (Priority Focus)
CyberArk PAS Admin Azure AD/Entra ID SailPoint IIQ/ISC
Okta Administration PowerShell Scripting CyberArk Conjur
Active Directory SAML/OAuth Concepts Zero Trust Architecture
AWS IAM Basics REST API Usage Python for IAM
Splunk Integration SAMA/GCC Compliance
Month 1 IAM Foundations & Identity Protocols

Master the protocols that power modern identity systems. SAML, OAuth, OIDC, and SCIM are prerequisites for everything that follows.

LEARNING OBJECTIVES

WEEK 1 SAML 2.0 Deep Dive
Theory (5 hours)
  • SAML 2.0 specification fundamentals: assertions, protocols, bindings, profiles
  • SP-initiated vs IdP-initiated flows with message tracing
  • XML signature validation and certificate management
  • Attribute mapping and claim transformation strategies
Hands-On Labs (10 hours)
LAB 1.1: Deploy Keycloak as SAML IdP
Docker-based identity provider setup
Pending
LAB 1.2: Configure SAML SP Integration
Service provider configuration with test app
Pending
LAB 1.3: Attribute Mapping Implementation
Map IdP attributes to application claims
Pending
LAB 1.4: SAML Debugging Masterclass
SAML-tracer and troubleshooting techniques
Pending
WEEK 2 OAuth 2.0 Authorization Framework
Theory (5 hours)
  • OAuth 2.0 grant types: Authorization Code, Client Credentials, PKCE
  • Token types: access tokens, refresh tokens, introspection
  • Scope design patterns for API authorization
  • OAuth security best practices (RFC 6819, OAuth 2.1)
Hands-On Labs (10 hours)
LAB 2.1: Build OAuth 2.0 Authorization Server
Keycloak OAuth configuration
Pending
LAB 2.2: Authorization Code + PKCE for SPA
Secure single-page application auth
Pending
LAB 2.3: Client Credentials for Services
Service-to-service authentication
Pending
LAB 2.4: Token Refresh & Revocation
Token lifecycle management
Pending
WEEK 3 OpenID Connect (OIDC)
Theory (5 hours)
  • OIDC vs OAuth 2.0: authentication layer on authorization
  • ID tokens, JWT structure, claims, and validation
  • Discovery endpoints and dynamic client registration
  • Hybrid flows and session management
WEEK 4 SCIM & Federation Architecture
Capstone Project
CAPSTONE: Multi-Protocol Identity Hub
Complete identity hub supporting SAML, OIDC, OAuth, and SCIM
Pending
Month 2 SailPoint Identity Governance

Master the most in-demand IGA platform in the Gulf market. SailPoint expertise is required for 70%+ of senior IAM roles.

CERTIFICATION TARGET
SailPoint IdentityNow (ISC) Engineer
WEEK 5 IGA Fundamentals & Architecture
WEEK 6 Application Onboarding & Connectors
WEEK 7 Access Certification & Governance
WEEK 8 Role Mining & Certification Exam
Month 3 CyberArk PAM Mastery

Elevate your existing CyberArk skills to architect level. Focus on Conjur for DevOps and advanced PSM configurations.

CERTIFICATION TARGET
CyberArk Defender or Sentry
WEEK 9 CyberArk Conjur for DevOps
WEEK 10 Advanced PSM Components
WEEK 11 CPM & Credential Management
WEEK 12 PAM Architecture & Certification
Month 4 Microsoft Entra ID & Cloud IAM

Master Azure identity for cloud-first enterprises. PIM, Conditional Access, and Entra ID Governance.

CERTIFICATION TARGET
Microsoft SC-300
WEEK 13 Azure AD/Entra ID Fundamentals
WEEK 14 Conditional Access Policies
WEEK 15 Privileged Identity Management (PIM)
WEEK 16 Entra ID Governance & SC-300 Exam
Month 5 Zero Trust & Automation

Build the architecture and automation skills that differentiate senior engineers from architects.

WEEK 17 Zero Trust Architecture (NIST 800-207)
WEEK 18 PowerShell for IAM Automation
WEEK 19 Python for IAM API Integration
WEEK 20 ZTNA Implementation
Month 6 GRC & Enterprise Integration

Compliance expertise that commands premium rates in the Gulf market. SAMA, SOX, GDPR, and ISO 27001.

WEEK 21 SOX Compliance for IAM
WEEK 22 GDPR Data Protection
WEEK 23 SAMA Cybersecurity Framework (Gulf Focus)
WEEK 24 CISSP Domain 5 & Capstone

Certification Timeline

MONTH 2
SailPoint ISC Engineer
ISC-ENG
$250
MONTH 3
CyberArk Defender
CDE / CSE
$300
MONTH 4
Microsoft SC-300
SC-300
$165
MONTH 6+
CISSP
CAT Exam
$749

Weekly Study Schedule

MON
Theory
2 hrs
TUE
Lab Work
3 hrs
WED
Theory
2 hrs
THU
Lab Work
3 hrs
FRI
Review
1.5 hrs
SAT
Capstone
4 hrs
SUN
Content
2 hrs

Total Weekly Commitment: 17.5 hours

Learning Resources

Platform URL Cost
SailPoint Identity University community.sailpoint.com/t5/Identity-University Free
CyberArk University training.cyberark.com Partner Access
Microsoft Learn SC-300 learn.microsoft.com Free
Okta Developer developer.okta.com Free
START TODAY

Week 1 Action: Set up your lab environment and register for SailPoint Identity University.
By July 2026, you will have 3 certifications and be interview-ready for 6-figure Gulf roles.

Start SailPoint Training Begin Week 1