CASE 01 DevOps Engineer — Cloud Stack role: DevOps Engineer systems: AWS IAM, GitHub, Okta, Jira, Slack Onboarding Identity Creation Create AD account + assign to DevOps OU IAM Enroll in Okta SSO + MFA (FIDO2 key) IAM Assign DevOps role group in AWS IAM IAM Access Provisioning GitHub — add to engineering org (write) IT Jira — DevOps project board (admin) IT Slack — #devops, #incidents, #deployments IT AWS prod access — via CyberArk only [CRITICAL] IAM Sign-off Security policy acknowledgment signed HR Manager access approval confirmed MGR Offboarding Immediate Revocation Disable Okta account — all sessions terminated [CRITICAL] IAM Revoke all AWS IAM keys and roles [CRITICAL] IAM Remove from GitHub org — all repos IT Data & Assets Transfer repo ownership to team lead MGR Recover YubiKey hardware token IT Archive Jira tickets and reassign open items MGR Audit & Closure Generate full access log export (90 days) IAM Close offboarding ServiceNow ticket IT Day 1 Identity + MFA active, core tools accessible Week 1 All systems provisioned, policy signed Month 1 Access review by IAM + manager sign-off