IAM job simulator

Work a real IAM shift before your first day.

Take the ticket queue at a 150-person company. Onboard, offboard, reset, deny, escalate. Then audit your own work. What you miss on Monday comes back on Thursday.

20 Monday tickets10 audit tasks13 consequences that can hit ThursdayRuns in your browser
P3REQ0018852Resolved · 7/7
Transfer: Tanya Wright, Sales to Operations
Workday HR · Monday 8:12 AM
P1INC0041302Thursday 2:14 AM
Dormant account signed in from unknown IP: Nina Shah
Entra ID Protection alert · password spray, new MFA method registered
✗Caused by your Monday shift: inactive accounts over 90 days were left enabled.
P1INC0041220Graded 10/10
URGENT: CFO locked out before wire deadline
Phone · unknown mobile number
✓Identity not verified (employee ID didn't match)2/2
✓No MFA or password change made4/4
✓Escalated to Security3/3
Why it's different

Other labs teach features. This teaches the job.

Most IAM training walks you through one setting at a time. Real IAM work is a queue: messy requests, approvals, people in a hurry, and decisions that have consequences.

A real queue

Tickets, not tutorials

Joiners, movers, leavers, lockouts, access requests, SoD conflicts, a fake CFO on the phone, and an MFA-fatigue attack, all at one company with 131 accounts.

Consequences

Monday comes back Thursday

Leave a stale account enabled and an attacker uses it. Disable the wrong service account and backups fail. Your next shift is built from your last one.

Do it, then audit it

Audit your own work

Switch to the GRC desk and test the controls you just operated, including the audit log of your own shift. No other platform makes you do both sides.

How it works

One company. A full week.

01

Take a ticket

Pick up requests from HR feeds, phone calls, alerts and access reviews.

02

Work the console

Enable, disable, reset, change groups and job info, set expiry, revoke sessions, escalate.

03

Get graded

Scored on the result and the process, with the NIST control behind each decision.

04

Live with it

Thursday's queue is built from your Monday. Then audit the whole week as the GRC tester.

Tracks

Start with IAM. Grow into the roles around it.

IAM Ops

Live

Service desk IAM analyst. Two shifts, 20+ tickets, consequences between them.

JMLMFASoDSocial engineeringIncidents

GRC Audit

Live

IT auditor. Test controls, rate deficiencies, review a SOC 2 report, write the finding.

SOX ITGCSamplingSOC 2Risk

PAM

Coming

Privileged access admin. Just-in-time admin requests, the vault, emergency accounts, session review.

JITBreak-glassRotation

Platform packs

Coming

Run the same scenarios in your own Entra ID, Active Directory, Okta and AWS labs, with scripts that load the company and grade your work.

Entra IDADOktaAWS
Founder

"I spent 16 years auditing access. I built the simulator I wish new analysts had."

Christopher Ashley has 16 years in audit and compliance, testing the controls that decide who gets access to what. Every ticket in ShiftReady is modeled on the failures auditors find in real companies: late terminations, copied access, approvals that shouldn't count.

16 years audit & complianceCompTIA Security+B.S. CybersecurityEntra ID · AWS IAM labs
Questions

Before you start

Who is this for?

Career changers and help desk techs moving into IAM, current analysts who want reps, and hiring managers who want to see how someone handles a real queue.

Do I need my own lab tenant?

No. The simulator runs in your browser. Platform packs for your own Entra, Okta and AWS labs are coming for people who want to practice in the real consoles.

What does it cost?

The Monday shift is free. Pricing for the full tracks goes to the waitlist first, with a founding-member price for early signups.

Is Pacific Crest a real company?

No. Pacific Crest Logistics and everyone in it are fictional.

Early access

Get the full week when it opens.

Join the waitlist for the PAM track, platform packs and founding-member pricing. One email when it's ready. No spam.