Anish Mehta
Anish Mehtacranial.io
Full profile
Vancouver, BC, Canada

Anish Mehta

IT Specialist | Identity & SaaS Operations

IAM | SaaS Governance | Endpoint Management | Workflow Automation

Experience

9+ years in IT

LinkedIn Email View full career profile
Okta Google Workspace Slack Enterprise Grid JumpCloud Jamf Apple Business Manager Microsoft 365 Active Directory Microsoft Entra ID BetterCloud Vanta CrowdStrike Zoom 1Password Jira Automation GAM SCIM Snipe-IT Synology NAS AWS S3 / Glacier Ruckus Wireless AppLocker Ansible FleetDM Tailscale
01

Profile

The short version

IT operations and workplace technology professional with 9+ years across senior internal IT, identity and access management, SaaS administration, endpoint management, and process automation. Most recently Senior IT Specialist at Sauce Labs, supporting roughly 500 employees in a distributed, cloud-first company. The through line of the work is making internal technology reliable, secure, and understandable, and turning repeated manual steps into consistent processes. Strongest in Okta identity, Google Workspace, and modern SaaS operations, with solid fundamentals in Windows and server environments from earlier roles.

9+

Years in IT

140+

SaaS applications at Sauce Labs

88 of 140

Apps automated for offboarding

3

SOC 2 audit cycles, Type 1 and Type 2

02

Selected work

Six featured | Five in brief

Access removal depended on fragmented manual steps. I extended and maintained an existing joiner/mover/leaver pipeline built on Freshdesk, JotForm, BambooHR, BetterCloud, Okta, and Jira, standardized group-driven workflow steps, and automated the line items that suited automation while keeping controlled manual exceptions. 88 of 140 applications ended up automated, and offboarding time per employee dropped from about 45 minutes to 15-20 minutes.

Role

Primary person driving the improvements, with the IT team.

Stack
  • Freshdesk
  • JotForm
  • BambooHR
  • BetterCloud
  • Okta
  • Jira

Interactive Offboarding workflow I built at Sauce Labs

Access had grown inconsistent across a fast-growing department. I solo-led a role-based access redesign for the GTM organization, mapping access across 32 job titles and aligning it to job functions with business stakeholders. The structure was later used as the template for a company-wide redesign delivered by the wider team.

Role

Solo-led the GTM project. The company-wide effort was the team's.

Stack
  • Okta
  • RBAC
  • Group-based access

I led a JumpCloud rollout for Windows and Linux endpoints that replaced Ivanti/MobileIron as the Windows MDM: policies, device management, onboarding processes, app scripts, SCIM integration, and Chocolatey-based software deployment. I was also the primary Windows administrator on an otherwise macOS-heavy team.

Role

Led the project. Owned Windows at Sauce Labs.

Stack
  • JumpCloud
  • SCIM
  • Chocolatey
  • Ivanti / MobileIron (replaced)

We needed to block unauthorized JRE/JDK installs while preserving a path for legitimate developer needs. On Windows, enforcement ran through JumpCloud and AppLocker. On macOS, Jamf-based approaches proved unreliable, so enforcement moved to CrowdStrike at the system level. Employees with a legitimate need had a documented exception process.

Role

Led the cross-platform control with the IT team.

Stack
  • JumpCloud
  • AppLocker
  • Jamf
  • CrowdStrike

I led the migration across nine domains, including planning, testing, user communication, and rollout. Mid-migration, I handled a controlled SSO exemption incident with a safe workaround while pursuing the root cause.

Role

Led the migration.

Stack
  • Slack Enterprise Grid
  • SSO

I led separate end-to-end company-wide rollouts of Gemini, including AI features inside Google Workspace, then Claude and OpenAI tools, then Zoom AI Companion. Each project had its own timeline, usage policy, access controls, and RACI planning with legal and every department involved.

Role

Led these rollouts.

Stack
  • Gemini
  • Claude
  • OpenAI
  • Zoom AI Companion
  • Google Workspace

Also, in brief

07

450+ user migration at Executive Group

Led the complete migration from an unbranded local web host providing POP/IMAP email to Microsoft 365 Exchange Online for the main organization, with some hotel domains migrated to Google Workspace. Sole IT resource.

Executive Group
08

SOC 2 audit support

Primary person from the IT team across three audit cycles, Type 1 and Type 2, using Vanta, owning evidence collection for IT-owned core applications and auditor requests around identity and access controls.

Sauce Labs
09

SauceULM lifecycle dashboard

Real-time onboarding and offboarding dashboard on the Okta API and GAM, triggering provisioning and deprovisioning through BetterCloud and direct API calls for apps BetterCloud did not cover, with a wizard-style checklist for lifecycle tasks. Replaced the spreadsheet. Solo side project, AI-assisted build.

Sauce Labs
10

Backup standardization at Executive Group

Every property did backups differently. Deployed Synology NAS at 8 properties, migrated local data onto them, and set up AWS S3 and Glacier as cold storage. Led as sole IT resource.

Executive Group
11

Wireless replacement at Four Seasons

Led the replacement of about 280 Ruckus access points, managed via Superclick/MAMA, from planning through completion, including physical installation and cabling.

Four Seasons
03

Experience

2006-2026

Independent IT Consultant

Self-Employed / Cranial.io | Confidential Clients

Feb 2026 - Sep 2026

  • Built Okta SSO and SCIM from scratch for two confidential clients, one with 20 to 30 app integrations and one with a Slack migration.

Senior IT Specialist

Sauce Labs

Apr 2022 - Nov 2025

  • Primary Okta administrator for about 500 users and 140+ SaaS applications.
  • Super Admin on Google Workspace, Slack, Zoom, and 1Password.
  • Cut offboarding from about 45 minutes to 15-20 minutes per employee across 88 of 140 apps.
  • Primary IT person for three SOC 2 audit cycles with Vanta, and led company-wide AI tool rollouts.

Corporate IT Manager / System Administrator

Executive Group of Hotels & Real Estate

Oct 2019 - Jan 2022

  • Sole IT resource for 14 properties and 450+ users.
  • Active Directory, Entra ID, and Microsoft 365 at every location, with provisioning standardized across properties.
  • Deployed Synology NAS at 8 properties with AWS S3 and Glacier cold storage.

IT Specialist

Four Seasons Resort & Residences

Mar 2016 - Sep 2019

  • Two-person IT team supporting 400-500 employees and about 600 endpoints.
  • Co-managed 26 Windows Servers and 2 Linux servers, and led the replacement of about 280 Ruckus access points.

Technical Officer, Call Center Support

Mphasis / EDS / HP

Nov 2006 - Oct 2010

  • Level 1-2 technical support for enterprise customers.
View full career profile
04

Technical map

Depth labels included

Identity

Administered
  • Okta (SSO, SAML, OIDC, SCIM, MFA, conditional access, Universal Directory, lifecycle)
  • JumpCloud
  • Active Directory
  • Microsoft Entra ID
  • RBAC
  • Group-based access
  • Access reviews
  • Provisioning / deprovisioning

SaaS and collaboration

Administered
  • Google Workspace
  • Slack incl. Enterprise Grid
  • Zoom
  • 1Password
  • Snipe-IT
  • BetterCloud
  • Vanta
Worked with to administered
  • Microsoft 365 / Exchange Online
Configured
  • Atlassian Jira (workflows and automations)

Endpoint

Administered
  • Jamf
  • Apple Business Manager
  • Windows and macOS administration
  • AppLocker
Familiar
  • Kandji
Worked with
  • CrowdStrike
  • Syncro RMM
  • AirWatch / Workspace ONE

Automation

  • BetterCloud (primary tool)
  • Jira Automation
  • REST APIs
  • Webhooks
  • GAM
  • SCIM-driven provisioning
  • Okta Workflows (limited, late exposure)

Scripting

Comfortable reading and adapting
  • Python
  • Bash
  • YAML
  • JSON

AI-assisted scripting for builds.

Infrastructure

  • Windows Server (Four Seasons and Executive Group)
  • VMware (Executive Group)
  • Synology NAS and AWS S3/Glacier (backup)
  • Ruckus wireless
  • Firewalls and VPN (worked with; hardware configured by an MSP I supervised)

Security and compliance

  • SOC 2 with Vanta
  • Access reviews
  • PCI-DSS (Four Seasons)
  • Endpoint protection with CrowdStrike
  • Druva and Netwrix Endpoint Protector (vendor-level)

Learning in home lab

  • Ansible
  • FleetDM
  • Tailscale
05

Operating principles

How I work
  1. 01

    Start from the real problem and explain technical issues in plain language.

  2. 02

    Security with practical, documented exceptions.

  3. 03

    Turn repeated manual steps into consistent workflows, and document the exceptions.

  4. 04

    Documentation is part of the work: runbooks, knowledge base, SOPs.

  5. 05

    Rollouts done responsibly: plan, test, communicate, support adoption.

06

Education

Post Graduate Diploma, Human Resource Management

Centennial College, Toronto

Dec 2011

Bachelor of Arts, Psychology

Ranchi University

2007
07

Contact

Say hello

Vancouver, BC, Canada | The fastest way to reach me is email

findanish@gmail.com
LinkedIn Full career profile