segregation-of-duties

Approval workflow components for React Flow, distributed as a shadcn registry. Quorum gates, thresholds, policy lint, plain-language editing behind a human gate.

A completely functional Hotel Management UI with a functionality similar to that of Trivago made using Java Swing.

An open-source collection of security, SOD analysis, and mass administration tools for SAP systems

Python-based ITGC testing toolkit for SOX control testing, audit findings, risk and control analysis, and security framework crosswalking.

Multi-agent GitHub PR review system built on GitAgent — Security, Performance & Quality agents review code in parallel with strict Segregation of Duties enforcement. Reviewers never approve. The synthesizer never codes.

Offline, explainable SAP segregation-of-duties evidence analysis for IT audit and GRC.

Detects overprivileged accounts, orphaned accounts and segregation-of-duties conflicts across synthetic AD, Azure RBAC and HR exports

Open-source identity & access governance for AI agent fleets — effective-access analysis, segregation-of-duties, least-privilege enforcement, and a tamper-evident audit ledger.

Synthetic IAM architecture case: centralized access lifecycle, directory-group RBAC, control/runtime separation, SoD and reconciliation

The traditional role mining in IAM is time consuming, relies on manual analysis of user permissions leading to inefficiencies, role explosion, and security gaps. I have tried to implement AI-driven role mining to cluster users, based on permissions and determine RBAC and finally to integrate the same in different IAM tools.

Simulated IT Audit exercise demonstrating user-access control testing, Excel-based exception analysis, risk assessment, findings documentation and evidence traceability.

Automated AR month-end close engine: subledger-to-GL reconciliation, bad-debt reserve, SOX-style controls, and an independent reviewer that catches preparer errors. Python.

Approval & audit service for LogSentinel — holds containment actions pending human sign-off and keeps a permanent record of who approved them, when, and why.

The policy chokepoint for finance AI agents.

Production-grade IAM governance evidence packs for Microsoft Entra ID — JML, Access Reviews, PIM, Conditional Access, SoD, PowerShell automation. NIST 800-53 + CMMC Level 2 aligned. Built by a Navy-trained IAM architect.

Free reference guide: common SAP Segregation of Duties (SoD) conflict patterns for FI/CO, MM, SD, HR — ECC & S/4HANA

Lab de governança IAM/IGA: SoD, privilege reachability cross-account, JML e recertification. Dashboard web interativo, editor de dados em banco e restore em um clique. FastAPI + NetworkX + SQLAlchemy, containerizado.

Automated AP close: 3-way match, duplicate-payment detection, GRNI accrual, GL tie, vendor recon, intercompany stress test. Python, 35 tests in CI.

Saviynt is an identity governance and administration (IGA) platform providing REST APIs for managing user identities, access requests, SOD violations, certifications, and privileged access controls across enterprise environments.