# Patrick Singletary (@psingletary.com)

Profile: https://sifa.id/p/psingletary.com
Headline: Problem Solver, Lead with Kindness

## About

Identity & Access Management Leader | Enterprise Security, SSO/PAM/IGA, Strategic Technology Leadership

With 26+ years across the technology landscape, including 8+ dedicated to identity and access management,I'm a delivery-driven IAM leader who architects enterprise identity programs, engineers identity federation, and translates security objectives into scalable technical strategy.

As a customer-facing technical lead, I own incident response, change management, SLAs, and operational reporting, sustaining a 2-hour average ticket resolution across 35,000+ endpoints and 450 locations. My career foundation in federal-sector work instilled rigorous security, compliance, and regulatory expectations that continue to inform my controls-based approach.

As a strategic leader, I shaped workforce identity lifecycle and access governance for 25,000+ employee organizations, defined role-based access control aligned to least-privilege and compliance requirements, directed a multi-year enterprise migrations, and drove privileged access management to a cloud-native model. I also served as a subject-matter expert during acquisitions, guiding security strategy, integration, and enterprise direction. I have hired, mentored, and managed technical staff, converting 20% of augmented talent to full-time roles, and I am skilled at building high-performing teams while aligning people strategy with technology goals. 

From an architecture perspective, I led single sign-on governance and access certification, engineered dynamic, self-service provisioning for role-based access, and architected guest and non-employee identity lifecycle programs integrated across IT service management platforms. My focus is building identity programs that are secure, reliable, and scalable; balanced against long-term enterprise architecture and strategic risk.

On the technical side, my hands-on expertise spans the core IAM categories recruiters look for: Single Sign-On (SAML, OIDC/OAuth 2.0), Privileged Access Management, and Identity Governance & Administration. I have deep production experience across PingFederate, SailPoint IdentityNow, SecZetta/NERM, CyberArk (on-prem and cloud-native), Entra ID, Active Directory, Okta, and API-based automation.

I build IAM programs that are secure, reliable, and scalable—and I lead the teams and technologies that deliver them. I'd welcome the opportunity to discuss how my strategic leadership in identity, security, and technology can drive value for your organization.

## Career

- **Senior Network Security Engineer at Dominion Energy** (Sep 2026 - Present)
  Full-time · Hybrid
  Responsible for advanced engineering, administration, and support of enterprise server infrastructure, identity and access management platforms, and security operations tooling.
  Senior technical resource within IT Infrastructure Operations, providing hands-on support, architectural input, and operational leadership across on-premises and cloud environments (Azure and AWS).
  Lead administration, configuration, and support of Windows and Linux server environments across enterprise data centers and cloud platforms.
  System lifecycle management aligned with security
  and compliance standards.
  Support hybrid infrastructure environments spanning on-premises, Azure, and AWS.
  Administer and maintain Active Directory infrastructure, including domain controllers, Group Policy, organizational units, and related directory services.
  Manage user, computer, service account, and security group administration in alignment with access management, operational, and compliance requirements.
  Troubleshoot Active Directory replication, authentication, name resolution, and policy application issues across enterprise environments.
  Manage and support enterprise identity platforms including Active Directory, Okta (MFA, SSO), Quest Active Roles, and Quest InTrust/Change Auditor.
  Implement and maintain secure authentication and authorization models.
  Troubleshoot identity synchronization and access issues.
  Administer CyberArk Privileged Access Management (PAM), including credential vaulting and privileged session monitoring.
  Support enterprise security tools used for endpoint protection and vulnerability management. Monitoring, Logging & Splunk Administration
  Administer Splunk infrastructure including forwarders, indexers, and search heads.
  Configure log ingestion across systems and develop dashboards and alerts.
- **Consultant, IAM at Dominion Energy** (Jun 2025 - Aug 2026)
  Contract · US · Hybrid
  Senior technical resource in IT Infrastructure Operations spanning on-premises, Azure, and AWS environments.
  
  
  
  Server & Infrastructure Administration: Lead administration, configuration, and support of Windows and Linux server environments across enterprise data centers and cloud platforms. Perform system builds, patching, performance tuning, and lifecycle management aligned with security and compliance standards. Support hybrid infrastructure spanning on-premises, Azure, and AWS. Administer Active Directory infrastructure including domain controllers, Group Policy, organizational units, and related directory services. Manage user, computer, service account, and security group administration aligned to access management and compliance requirements. Troubleshoot Active Directory replication, authentication, name resolution, and policy application issues across enterprise environments.
  
  
  
  Identity & Access Management: Manage enterprise identity platforms including Active Directory, Okta (MFA, SSO), Quest Active Roles, and Quest InTrust/Change Auditor. Implement secure authentication and authorization models and troubleshoot identity synchronization and access issues.
  
  
  
  Privileged Access & Security Tools: Administer CyberArk Privileged Access Management (PAM) including credential vaulting and privileged session monitoring. Support enterprise security tooling for endpoint protection and vulnerability management.
  
  
  
  Monitoring, Logging & Splunk Administration: Administer Splunk forwarders, indexers, and search heads; configure log ingestion and develop dashboards and alerts.
  
  Cloud Engineering: Support Azure and AWS infrastructure and implement cloud security controls.
  
  
  
  Security Operations & Compliance: Support incident response, vulnerability remediation, and audit activities.
  
  Automation & Scripting: Develop automation using PowerShell, Python, and similar tooling.
  
  Collaboration & Leadership: Serve as a technical lead and mentor junior engineers.
- **Senior Cybersecurity Engineer, Identity and Access Management at CarMax** (Mar 2021 - Jan 2025)
  Full-time · Richmond, Virginia, US · Hybrid
  Responsibilities: 
  
  SSO, PAM, Non-Employee Lifecycle Management, AD RBAC enforcement 
  
  Project : ERP 
  
  Onboarding of RBAC provisioning of access to Oracle HRM, Oracle ERP, and Coupa 
  
  Project : SailPoint ISC 
  
  Initial Implementation of environment & Connecting Authoritative ID Sources 
  
  Partnering with Technology Owners and Business Owners to update Process and Documentation to convert systems 
- **Cybersecurity Engineer at CarMax** (Dec 2018 - Mar 2021)
  Responsibilities: 
  
  SSO, PAM, Non-Employee Lifecycle Management, AD RBAC enforcement 
  
  Project : Enterprise MFA 
  
  R&D, Propose, Source technology and service, and Implementation 
  
  Lead Engineer and Subject Matter Expert 
  
  Deployed PKIaaS and Certificate based authentication to 35k + Endpoints 
  
  Project : CarMax Acquisition of Edmunds, Integrations of identity systems  
  
  Project : Enterprise PAM 
  
  IAM/PAM SME for Onboarding Teams and conversion of processes 
- **Sr Engineer, End User Computing at CarMax** (Sep 2012 - Nov 2018)
  Integrate new technology and make it work! Principle design of Windows 10 with Security Baselines as a standard and assessment / implementation for privileged access. Redesign of AirWatch Organization Groups for compliance and better integration with our identity Management systems and Active Directory Lead testing and changes to our browser platforms to introduce Google Chrome and Internet Explorer 11 (With Legacy Browser Support and Enterprise Mode) Part of our Home/Alternate Delivery Team to address our forms management process (printing & scanning and it evolution to digital signature and delivery) Principle design of GPO structure and its correlation to Active Directory structure. Migrated Enterprise from Windows XP to Windows 7 over 2 years. Peak throughput was 1000 desktops across 10 stores over 4 nights with only 14 incidents reported.
- **Team Member at AmeriCorps** (May 1994 - Apr 1995)
  Fellowship
  •	Coordinated Volunteer services with local community groups in Baltimore
  • Planned and coordinated construction/restoration of Hiking Trails in Maine
  • Planned and Executed Lesson Plans for Students in Havre de Grace MD
  • Assessed damage and helped Victims in New Orleans Flooding with the American Red Cross
  • Worked in Partnership with other Americorps programs in Boston, New York and Charleston

## Projects

- **Modern Browser (Google Chrome)**
- **Windows 7x64**
  Create based image to work across 8 hardware platforms Setup test enviroment for 39 differnet IT teams to validate application functionality Coordinated, deployed and supported pilot deployment to single location Remeditated applications and web based systems Implemented central management of OS and browser settings with Group Policies Developed Image deployment and user data capture process with Dell Contractor Absorbed user account migrations for domain migration from 2003 to 2008 Supervised a team of 4 technicians Migration of 16000 desktops/laptops to Windows 7 x64  Peak output
  \- 1000 PCs across 10 locations in 4 business days
- **Next Generation Store Format**
  Implementation of iPads, Large Format Displays, and Digital Content Management Systems
- **VDI Evaluation**
- **Annual PC Refresh**
- **New Store Installs**
- **Windows 2000 Migration**
- **Windows 10**
- **Alternative Delivery - Home Delivery**
  In addition to getting the equipment that matches our systems installed a van, I worked closely with application teams for temporary solutions and developing new application methods for moving the Vehicle delivery process from an Office to where you get your car (Home, Work, or anywhere). I helped with the design change over two years at the Pilot location in Charlotte, then delivered the technology + vans (10) in Raleigh and Atalanta
- **Store Virtualization**
- **Privileged Access Management**
- **SSO certificate update**
- **Multi Factor Authentication (MFA)**
- **Identity Access Governance**
  Deployment of our IGA toolset and launch of IGA Program

## Publications

- 2026 week 38 — insummary.offprint.app (Sep 2026) https://insummary.offprint.app/a/3mwiunpcj5p23-2026-week-38
- 2026 week 37 — insummary.offprint.app (Sep 2026) https://insummary.offprint.app/a/3mvxjec4nuh23-2026-week-37
- 2026 week 36 — insummary.offprint.app (Sep 2026) https://insummary.offprint.app/a/3mutykqsn7r23-2026-week-36
- 2026 week 35 — insummary.offprint.app (Sep 2026) https://insummary.offprint.app/a/3mutvvjf22323-2026-week-35
- 2026 week 34 — insummary.offprint.app (Aug 2026) https://insummary.offprint.app/a/3mucmyifbew23-2026-week-34
- 2026 week 33 — insummary.offprint.app (Aug 2026) https://insummary.offprint.app/a/3mtr4z66mzm23-2026-week-33
- If you're not mad, you're not paying attention — longfrom.stznz7qsokto2345qtdzogjb.com (Aug 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mtlre3khqk23-if-youre-not-mad-youre-not-paying-attention
- 2026 week 32 — insummary.offprint.app (Aug 2026) https://insummary.offprint.app/a/3mt7cmew66x23-2026-week-32
- 2026 week 31 — insummary.offprint.app (Aug 2026) https://insummary.offprint.app/a/3msoxpge63b23-2026-week-31
- Alas, I will not be playing GTA6 — longfrom.stznz7qsokto2345qtdzogjb.com (Aug 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mqeqoq2awh23-alas-i-will-not-be-playing-gta6
- 2026 week 30 — insummary.offprint.app (Aug 2026) https://insummary.offprint.app/a/3mrn3le5dl723-2026-week-30
- Shooting from the hip today — longfrom.stznz7qsokto2345qtdzogjb.com (Jul 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mrx3qc7uh323-shooting-from-the-hip-today
- 2026 week 29 — insummary.offprint.app (Jul 2026) https://insummary.offprint.app/a/3mqww3qvxsi23-2026-week-29
- year 4 — longfrom.stznz7qsokto2345qtdzogjb.com (Jul 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mqjzgh4loc23-year-4
- 2026 week 28 — insummary.offprint.app (Jul 2026) https://insummary.offprint.app/a/3mqhmom3dau23-2026-week-28
- quick rant - follow friction — longfrom.stznz7qsokto2345qtdzogjb.com (Jul 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mqyswqegoj23-quick-rant-follow-friction
- Comminication hygine — longfrom.stznz7qsokto2345qtdzogjb.com (Jul 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mqh2ucegv223-comminication-hygine
- 2026 week 27 — insummary.offprint.app (Jul 2026) https://insummary.offprint.app/a/3mqesadhnj623-2026-week-27
- Decentralized advocacy — longfrom.stznz7qsokto2345qtdzogjb.com (Jul 2026) https://longfrom.stznz7qsokto2345qtdzogjb.com/a/3mpvheuun5o23-decentralized-advocacy
- 2026 week 26 — insummary.offprint.app (Jul 2026) https://insummary.offprint.app/a/3mpwr2r4wlt23-2026-week-26
- Kindness : Continue reading on Unthread (Jul 2026)

## Skills

### Technical
- Databases
- DevOps
- Enterprise Integration
- Java
- JavaScript
- Microsoft Azure
- OAuth
- Powershell
- Python (Programming Language)
- Requirements Analysis
- SQL
### Business
- Agile Methodologies
- Business Analysis
- Change Management
- Knowledge Management
- Operations Management
- Process Improvement
- Product Lifecycle Management
- Project Management
### Interpersonal
- Public Speaking
- Team Leadership
- Technical Leadership
- Troubleshooting
### Security
- Cybersecurity
- Identity and Access Management
- Identity and Access Management (IAM)
- Threat Intelligence
### Other
- A+
- Contract Negotiation
- CoPilot
- End User Training
- Enterprise Architecture
- Group Policy
- Identity Governance
- Large Scale Change Management
- Large Scale Deployments
- Large Scale System Integration
- MCSE
- Methodology
- OIDC
- Organizational Change Agent
- Prompt Engineering
- SAML
- SCIM
- Scope Planning
- Software Deployment
- SSO
- Vendor Contracts
- Vendor Management Experience
- Virtualization

## Credentials

- Access Risk Management Introduction - ELEARNING — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/a4eca2fa-f673-3236-9b94-c903372221fe/view-ext
- AI Services What is the Recommendation Engine? - QuickLearn - 3 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/4ed327cf-6934-3eb3-bc80-9cc40b26204e/view-ext
- IdentityNow: Test an IdentityNow API Call- QuickLearn - 2 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/33393743-8622-302b-8f5a-020362d21710/view-ext
- IdentityNow: Retrieve an IdentityNow Access Token - QuickLearn - 2 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/217a4140-bd90-38c5-8cb1-8990c65f8521/view-ext
- IdentityNow Essentials 3: Search and Compliance - ELEARNING — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/87b5a05a-c6b1-308d-83ad-7151b125a71a/view-ext
- AI Services What is Access Modeling? - QuickLearn - 3 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/48b15489-f454-3679-b1e2-c28bcfc4e7b4/view-ext
- AI Services What is Access Insights? - QuickLearn - 4 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/597cc4d7-e55c-39a8-afd3-9b4f0eae0ef9/view-ext
- AI Services and IdentityIQ Integration Configuration - QuickLearn — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/5b753442-8c2d-3ead-8f0e-48d840eba888/view-ext
- AI Services Role Discovery - QuickLearn — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/fcb2de13-1fc4-3c69-a287-b6a626f0c2f5/view-ext
- AI Services Virtual Appliances IdentityIQ and IdentityNow - QuickLearn — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/500c9f5f-af86-3fcd-af63-b060acd3f872/view-ext
- AI Services Role Insights - QuickLearn — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/ed9c862f-08b5-36bb-84ff-27f91e235591/view-ext
- AI Services Identity Attribute Mapping 101 - QuickLearn — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/cc57fd62-6f23-32c4-b179-8f748f6d9161/view-ext
- AI Services Access Certifications Recommendations — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/72f1e172-533e-340c-9a02-7de5f046452a/view-ext
- IdentityNow: Configure Postman for IdentityNow Exercises - QuickLearn - 2 min — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/557d66b4-54e7-33b4-99f8-bcc55bf69bf8/view-ext
- IdentityNow: Install Postman for IdentityNow Exercises - QuickLearn - 1 min — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/9be801b8-7f5e-3104-9444-0d1bfa764a50/view-ext
- IdentityNow: Configure Postman Collection Tokens for Reuse - QuickLearn - 1 min — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/fca2cf9d-9ea0-34ef-ad3f-07a0d0f953c6/view-ext
- IdentityNow: Reuse a Personal Access Token in Postman - QuickLearn - 3 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/d035bce8-b0a1-3587-ac7f-444ad7ec442b/view-ext
- IdentityNow: Import IdentityNow Swagger Files into Postman - QuickLearn - 2 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/c2bd147a-0295-3383-a90b-8d3aeead58e4/view-ext
- IdentityNow: Configure IdentityNow Collection Variables in Postman - QuickLearn - 2 mins — SailPoint (Feb 2022) https://university.sailpoint.com/award/completion/84416c3f-f761-309e-8bbd-4c01a6c1ab21/view-ext
- SailPoint's API Approach - QuickLearn — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/3729b6fe-0eec-3562-95de-b373168184af/view-ext
- Event Triggers Overview - QuickLearn — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/60172abe-c9ce-3044-9a07-e72cf31b3d80/view-ext
- IdentityNow Essentials 2: Provisioning - ELEARNING — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/fa2bb10c-9067-3718-bca9-d15cd448a4d4/view-ext
- IdentityNow Essentials 1: Setup and Modeling - ELEARNING — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/ddad437a-d3a2-338c-9c15-176683a15cdf/view-ext
- Event Triggers Use Case - QuickLearn — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/7769c762-ed54-3164-8f57-3776f793e5f9/view-ext
- SailPoint Developer Community Site - QuickLearn — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/9e1dec69-2420-3080-9383-39b9b63732bd/view-ext
- IdentityNow Introduction - ELEARNING — SailPoint (Dec 2021) https://university.sailpoint.com/award/completion/e7ab0b4c-da68-359f-9b5e-904e3ef1e932/view-ext
- Splunk 7.x Fundamentals Part 1 (eLearning) — Splunk (May 2019) https://education.splunk.com/award/completion/e85fd86f-b06b-3599-a491-ac0a8f428d44/preview
- CyberArk Level 1: Trustee Exam — CyberArk (Dec 2018) https://training.cyberark.com/award/certification/cbd55af3-4a20-389d-8b01-ec2a45396db1/view
- A+ Certified Professional — CompTIA (Jul 2002)
- Microsoft Certified Professional — Microsoft (Jun 2000)
- Microsoft Certified Professional + Internet — Microsoft (Jun 2000)
- Microsoft Certifies Systems Engineer — Microsoft (Jun 2000)

## Education

- **Brightpoint Community College** — Associate of Arts and Sciences - AAS, Business Administration and Management, General (Aug 2007 - Jan 2012)
- **Virginia Polytechnic Institute and State University** — Management Science (Aug 1995 - Dec 2000)
  Activities & Societies: Alpha Phi Omega

## Courses

- CyberArk Privileged Account Security (PAS) Administration

## Awards

- Eagle Scout — Scouting America (May 1989)

## Involvement

### Volunteering
- ATmosphereConf
  Volunteer Lead of Remote/Hybrid Experiance
- ATmosphereConf
  Volunteer Lead of Remote/Hybrid Experiance

## Languages

- English (native)

## Links

- orcid: https://orcid.org/0000-0001-7056-3819
- tangled: https://tangled.org/did:plc:stznz7qsokto2345qtdzogjb
- linkedin: https://www.linkedin.com/in/psingletary
- dns: https://psingletary.com
- github: https://github.com/PSingletary