top of page

Suneel Kumar Rawat

Principal ID and Access Engineer at Navy Federal Credit Union

Suneel Kumar Rawat

FELLOW MEMBER

Suneel Kumar Rawat is an identity-and-access specialist whose career has been shaped by a single, high-stakes premise: in modern enterprises, security is not a product bolted onto systems—it is an operational discipline enforced through identity. Over more than twenty years across India, Switzerland, and the United States, he has built and modernized Identity and Access Management (IAM) and Identity Governance and Administration (IGA) programs in sectors where failure is not an option—financial services, healthcare, telecommunications, and enterprise technology.

At Navy Federal Credit Union, the largest credit union in the United States by membership and assets, Rawat operates in an environment where identity decisions directly influence member trust, regulatory exposure, and cyber-risk at massive scale.  In his role as Principal Engineer for Identity Access and Management, he has focused on “Mission Padlock,” implementing governance and role-based access controls that move identity from manual approvals to enforceable, automated policy—covering birthright access, lifecycle provisioning, access certifications, and segregation-of-duties controls through Saviynt-driven workflows.

That pattern—turning policy into automated control—shows up consistently across his prior roles. As a Technical Architect at Saviynt, he led enterprise IGA architecture and integrations, driving application onboarding, lifecycle automation, and connector strategies that determine whether identity governance is theoretical or actually enforceable. At LA Care Health Plan, he owned and extended Oracle Identity Manager/Oracle Identity Governance capabilities through custom Java/J2EE development—connectors, event handlers, schedulers, and RBAC models—work that is typically the difference between an IAM platform that exists and one that works. In privileged access management, he supported Banc of California initiatives around credential vaulting, session controls, and privileged monitoring—controls that are widely recognized as critical because attackers routinely target privileged pathways rather than “regular” user accounts.

Across consulting engagements (Chewy, SMBC Capital Markets, Verizon Connect, IBM, Kaiser Permanente), Rawat’s career reads like a map of how enterprises actually mature identity: integrate directories and SaaS identity (AD/Okta), connect identity governance to enterprise workflow systems (ServiceNow), and operationalize certifications and separation-of-duties so audits become evidence-driven, not spreadsheet-driven. Underpinning it all is a consistent alignment with the direction of modern security guidance—continuous verification and least-privilege access—where identity is treated as the control plane for enterprise risk management.

bottom of page