Building Rivitan so hybrid identity estates finally get governance that closes the loop.
Mehdi
Founder & CEO · Rivitan
Dallas–Fort Worth, TX
Open for demos, pilots & architecture conversations14+
Years in enterprise IT & IAM
150K+
Directory objects operated
6
AD forests synchronized
2
Cloud IAM stacks in depth
Strategic identity leader with 14+ years designing and modernizing enterprise-scale IAM, RBAC, and directory services across Active Directory, Microsoft Entra ID, and AWS IAM.
I have run the messy work operators inherit — multi-forest AD, tenant mergers, entitlement reviews, Zero Trust alignment, and joiner–mover–leaver automation — then turned that experience into Rivitan Platform.
As Founder & CEO of Rivitan, I still stay close to the architecture: hybrid identity governance that reviews, remediates, and leaves an audit trail you can defend.
“Enterprise identity fails in the gap between policy and the directory. Rivitan exists to close that gap — with software operators will actually run.”
The same domains Rivitan is built to govern — learned by running them in production, not from a slide deck.
Multi-forest Active Directory, Entra ID synchronization, forest trusts, Bastion / tier models, and large-scale consolidation after mergers and decommissions.
Role hierarchies, least privilege, separation of duties, entitlement reviews, and access policies that hold up under SOX, SOC 2, ISO 27001, and NIST scrutiny.
Identity-centric authentication and authorization, ADFS / SAML / OAuth, Conditional Access patterns, and bridging on-prem directories to cloud IdPs.
PowerShell and Python at scale, Microsoft Graph, Workday and ServiceNow integrations, and JML flows that assign and revoke roles without hallway access.
AWS IAM / Identity Center, permission boundaries, SSO for workloads like AppStream, and Azure IaaS/PaaS identity perimeters operators can actually run.
Principal architect behind Rivitan — customer-deployed IAM portals, access reviews that revoke, hygiene remediation, and an audited AI assistant for operators.
Selected roles — from service-provider networking to Fortune-scale hybrid identity.
Signet Jewelers
Signet Jewelers
Cognizant (Merck)
Signet Jewelers
Amazon (Contract)
Pioneer Data Systems
Zaman ISP
Identity, cloud, and infrastructure credentials that back the work.
AWS Solutions Architect – Associate
Amazon Web Services
SC-300 Identity and Access Administrator
Microsoft
VMware VCP 6.0
VMware
Python
Coursera
SQL Server
Bellevue College
Computer engineering and AI coursework beneath years of production identity work.
Master's coursework — Artificial Intelligence
Khajeh Nasir Toosi University of Technology · Tehran, Iran
2014 – 2016 · Certificate pending
B.S. Computer Engineering
Azad University · Malayer, Iran
2005 – 2010
Outside of identity work: hiking and time outdoors, continuous learning in cloud and cybersecurity, and the quiet craft of automation scripts that save teams hours every week.
Reach me directly, or book a guided walkthrough tailored to the topics you care about.