Gonçalo Marçalo

Gonçalo Marçalo

IAM Governance Specialist · Cybersecurity & IAM Engineer

📍 Covilhã, Castelo Branco, Portugal · Currently at a major European banking institution via PrimeIT

About

I am an IT Consultant with over 4 years of experience delivering enterprise infrastructure projects — in monitoring, IAM and automation — for clients including Volvo Group, Telefónica, the Spanish Ministry of Defence, and currently allocated to a major European banking institution's CIB division through PrimeIT Consulting. I hold a BSc in Management Information Systems from Instituto Politécnico de Setúbal.

My work has focused on identity federation (SAML, OIDC, OAuth), access control, IAM governance and systems automation. At Volvo Group I migrated more than 50 enterprise applications from CA SiteMinder to Ping Identity with zero customer complaints. At Telefónica I built a Bash automation suite that reduced weeks of manual BI analysis to a 10-minute run.

Currently, I am working as an IAM Governance Specialist at PrimeIT Consulting, allocated to a major European banking institution's CIB division, where I manage access reviews, entitlement optimization and exception remediation using SailPoint within a highly regulated, multi-entity identity landscape.

I am certified through the Google Cybersecurity Professional Certificate and preparing CompTIA Security+, with a focus on IAM engineering, identity governance and security operations.

In parallel, I build personal tools — like Job Radar — to learn by doing and automate my workflows.

Experience

Oct 2026 — Present

IAM Governance Specialist

PrimeIT Consulting (allocated to major European banking institution — CIB division)

  • SailPoint operations — managing IdentityNow/IIQ for access reviews and entitlement optimization across a multi-entity identity landscape
  • Access review campaigns — orchestrating recertification cycles and exception remediation within a highly regulated banking environment
  • Entitlement management — analyzing, cleaning and optimizing access rights across enterprise applications
  • IAM governance application administration — configuring and maintaining governance workflows aligned with DORA compliance requirements
Apr 2022 — Aug 2026

IT Consultant — IAM & ITSM

Smart Technologies (BINNGRO Group)

  • Volvo Group — migrated 50+ enterprise apps from CA SiteMinder to Ping Identity (PingFederate / PingAccess), validating SSO flows and access policies with zero customer complaints
  • Telefónica Spain — executed a SiteMinder upgrade (QA → pre-prod → prod, Java 8→11) and built a 9–10 script Bash suite that extracted the full policy store via REST API into CSV, reducing weeks of manual work to a 10-minute run
  • Spanish Ministry of Defence — stabilised and upgraded DX NetOps (Spectrum, Performance Center, NFA) for 1,200+ SNMP devices; managed platform PKI (OpenSSL, keytool) and MySQL maintenance
  • Broadcom / Aspire — built a Juniper event-correlation catalogue covering 36+ interdependent events, enabling faster L1 triage and fewer false-positive escalations
  • NGO client (FIBE) — led response to 3 security incidents on a compromised WordPress site: terminated sessions, rotated credentials, removed injected code, recommended KeePass + awareness training
Aug 2020 — Oct 2020

C# Developer Intern

TULAlabs

  • Built a full-stack C# application for real-time industrial monitoring with SQL database and responsive web UI
  • Worked in an agile team with Git workflow and peer code reviews
2017 — 2026

BSc in Management Information Systems

Instituto Politécnico de Setúbal

  • Software engineering, networking, operating systems, databases
  • Final year aligned with cybersecurity and IAM specialisation

Core Skills

Languages

Projects

🎯 Job Radar — Job Market Intelligence Dashboard

Automated job market monitoring system for cybersecurity & IAM opportunities. Scrapes 5 job boards (LinkedIn, Indeed, ITJobs, Net-Empregos, Landing.jobs), enriches descriptions via JSON-LD, applies a 50+ keyword scoring engine and delivers a weekly interactive HTML dashboard by email.

Python · BeautifulSoup · pandas · Resend API · HTML/CSS/JS

View on GitHub →

🏠 Homelab

Self-hosted home lab for learning infrastructure, networking and security in practice. Experiments with containers, identity providers, monitoring and defensive security.

Linux · Docker · Networking · Identity providers

View on GitHub →

Certifications & Learning

Contact

I am currently working as an IAM Governance Specialist at PrimeIT Consulting, allocated to a major European banking institution's CIB division. I am open to connecting with other IAM and cybersecurity professionals, as well as future opportunities in identity governance, IAM engineering and security operations.

The best way to reach me is by email at gonsaloam@outlook.pt or via LinkedIn.