Transforming Global Identity & Access Management: A Breakthrough Greenfield IAM Implementation

Organizational Context
Estee Lauder Companies is a global leader in cosmetics and consumer goods with a portfolio of iconic brands. With over 75,000 employees and operations in more than 150 countries, the company demands a robust, secure, and scalable IT infrastructure. The diverse nature of its workforce and the highly regulated industry environment call for cutting-edge cybersecurity practices.


Project Background
In response to increasing regulatory and security challenges, Estee Lauder embarked on its first-ever Greenfield Identity and Access Management (IAM) implementation from July 2019 to September 2021. The project was initiated to replace a fragmented, legacy access control environment with a unified, centralized system. This new approach was envisioned to address stringent compliance requirements—such as GDPR, CCPA, and SOX—while enhancing operational efficiency and user experience across its global operations.


Leadership and Role
Ummer Khan, a seasoned IT leader with over 20 years of experience in managing complex infrastructures and digital transformations, was appointed as the Senior Project Manager. He was tasked with architecting and executing an entirely new IAM ecosystem from scratch. His responsibilities spanned from high-level strategic planning to the granular execution of technical components, ensuring that both on-premises and cloud-based systems worked in harmony.


Project Imperatives and Challenges
The key challenge was to design a future-proof, hybrid IAM solution capable of integrating modern cloud services (Azure AD, Okta) with existing on-premises systems (Active Directory, LDAP). This approach had to guarantee 99.99% uptime, enforce dynamic access control through both Role-Based and Attribute-Based Access Control (RBAC and ABAC), and offer a seamless user self-service portal. Another critical requirement was to automate compliance and audit processes, ensuring continuous adherence to industry regulations.


Impact and Significance
By developing this innovative IAM framework, the project not only fortified Estee Lauder’s cybersecurity posture but also laid the groundwork for operational excellence. It became a cornerstone for secure digital transformation across the organization, enhancing both the business’s agility and its ability to protect sensitive consumer and business data. This ambitious initiative, led by Ummer Khan, set a new standard for IT transformation within the consumer industry.