Aman Varma

• Identity governance

  SecuritySoftware2026 – present

  AccessPilot: identity governance platform

  A governance layer over Entra ID, Okta and Active Directory that controls who has access to what, for how long, and under whose approval.

  Personal project

  • Python / FastAPI
  • PostgreSQL
  • React / TypeScript
  • Graph API
  • Okta
  • LDAPS
  • SoD
  • Access Reviews

  Code for AccessPilot on GitHub (opens in new tab)Architecture reference for AccessPilot (opens in new tab)

  Read case study: AccessPilot: identity governance platform

  Problem

  Directories like Entra ID, Okta or Active Directory handle authentication, but none provides an end-to-end request, approval, activation, expiry and review lifecycle across several directories.

  Approach

  FastAPI backend with PostgreSQL and a React/TypeScript frontend. One shared connector interface for Entra ID (Graph API), Okta, Active Directory (LDAPS) and CSV/HR feeds, with a joiner-mover-leaver engine, birthright policies, access packages, business roles, multi-stage workflows, separation of duties, access reviews, an entitlement catalog and audit logging on top.

  Result

  A working IGA platform with HR pull sync, multi-directory provisioning, self-healing background workers and break-glass access, documented in a full architecture reference.

  

• Email security

  SecurityWeb Apps2025

  PhishIntel Analyzer

  A web app that analyses phishing .eml files using an NLP model, heuristics and threat-intelligence lookups.

  Security project

  • Python
  • Flask
  • NLP
  • Threat Intelligence

  Code for PhishIntel Analyzer on GitHub (opens in new tab)Article on Medium (opens in new tab)Report project report (opens in new tab)

  Read case study: PhishIntel Analyzer

  Problem

  Assessing suspicious emails quickly and explainably needs more than a single detection method.

  Approach

  A Flask app that parses .eml files and combines three methods: a pre-trained NLP model, rule-based heuristics and threat-intelligence integration.

  Result

  Each email is scored using all three methods, documented in an article and a project report.

  

• Monitoring

  SecurityWeb Apps2025

  LogSentinel

  Log analysis platform for small businesses to monitor server and authentication logs and spot suspicious activity.

  Security project

  • Python
  • Flask
  • Log analysis

  Code for LogSentinel on GitHub (opens in new tab)

  Read case study: LogSentinel

  Problem

  Small businesses rarely have the security expertise to make sense of server and authentication logs.

  Approach

  A web-based platform that ingests logs, detects suspicious activity and visualises security-relevant patterns.

  Result

  Security-relevant anomalies become visible without deep cybersecurity know-how.

  

• Cloud identity

  Web AppsSecurityAzure lab

  Secure web app with Entra ID

  Node.js app on Azure App Service with Entra ID authentication (Easy Auth) and RBAC via App Registration.

  Lab project

  • Azure App Service
  • Entra ID
  • Easy Auth
  • Node.js
  • RBAC

  Step-by-step article on Medium (opens in new tab)

  Read case study: Secure web app with Entra ID

  Problem

  A web app had to be reachable only by explicitly assigned users, without writing custom login code.

  Approach

  Deployed to Azure App Service, authentication through Entra ID (Easy Auth), App Registration and an Enterprise Application with user assignment required.

  Result

  Access limited to assigned users, documented as a step-by-step article.

  

Certifications

• SC-300: Microsoft Identity and Access AdministratorMicrosoft
• Cybersecurity EssentialsCisco
• Network DefenseCisco
• Ethical HackerCisco
• Cybersecurity FundamentalsIBM
• IT Fundamentals (ITF+)CompTIA
• German language test (DTZ): B1g.a.s.t.