Nexgen IT Solutions

Nexgen was onboarding 200+ engineers per year across 8 systems — Active Directory, GSuite, Jira, GitHub, Slack, VPN, the internal project tool, and a client access portal. Manual IT provisioning took 6–8 hours per new joiner, was error-prone (wrong group permissions on 1 in 5 joiners), and caused first-day delays that damaged new hire experience and delayed project allocation by an average of 1.8 days.

• 01Built an unattended Blue Prism bot triggered by a webhook from the Keka HRMS on offer-letter acceptance — fully automated before the employee's first day
• 02Bot provisions all 8 systems in a defined sequence: AD account creation, GSuite licence assignment, Jira and Confluence access, GitHub org invite, Slack workspace add, VPN certificate generation, internal tool role assignment, and client portal access where applicable
• 03All credentials and service account keys stored in AWS Secrets Manager — bot retrieves at runtime, never hardcoded
• 04Every provisioning action logged to CloudWatch with the joiner ID, system name, action taken, and timestamp — complete audit trail for IT governance and ISO 27001 evidence
• 05Deployed in a private AWS subnet with the Blue Prism runtime server behind a security group, accessible only from the Keka webhook source IP and the IT admin bastion

• Onboarding provisioning time reduced from 6–8 hours to 18 minutes — a 96% reduction
• Zero provisioning errors since deployment — 11 months and 190+ onboards without a single wrong-permission incident
• First-day delay eliminated — new joiners have all access ready before 9am on day one
• IT team reclaimed 400+ hours annually — redeployed to infrastructure automation and security hardening projects
• Deprovisioning automated in parallel — leavers are fully offboarded across all 8 systems within 15 minutes of HRMS exit trigger, closing the access governance risk that previously averaged 3.2 days