Harmanpreet Kaur

Cyber Security Architect @ Metrolinx

About

Harmanpreet Kaur is a Security Architect at Metrolinx, Canada, with over 8 years of experience specializing in Identity and Access Management (IAM) and Privileged Access Management (PAM). She has led the successful delivery of complex implementation, operational, and strategic security engagements for global clients across diverse industries. With deep expertise in IAM and PAM solutions, including CyberArk, Delinea, Entra ID, HashiCorp, Harman has designed and deployed secure PAM architectures, conducted maturity assessments, and developed tactical roadmaps to address gaps in privileged access governance. 🔍 Highlights - Delivered IAM and PAM implementations, driving secure access strategies across cloud and hybrid infrastructures. - Conducted in-depth threat and risk assessments and developed remediation roadmaps aligned with compliance standards like NIST and ISO 27001. - Collaborated closely with clients to gather business requirements, define rollout strategies, and ensure broad adoption of security capabilities. - Skilled in translating business needs into technical solutions that align with Zero Trust, secure SDLC, and cloud security frameworks. Harman brings a unique blend of technical expertise and business acumen that enables her to simplify complex security challenges and deliver measurable outcomes. She is passionate about enabling secure digital transformation, enhancing cloud identity security, and driving the strategic adoption of IAM/PAM tools across organizations.

Country

City

Canada

Industry

Management Consulting

Skill

Brex, Security Architecture Design, Risk Assessment, Cyber Risk Management, Cloud Security, Secret management, Microsoft Entra ID, Azure Identity and Access Management, Microsoft Azure, Leadership, Ticketing Systems, Oral Communication, Okta Administration, Problem Solving, Data Privacy, Authentication Systems, Information Security, OAuth, SQL, Java

Experience

Cyber Security Architect

Metrolinx

2025-2 - Present · 1 yr 8 mos

Toronto, Ontario, Canada

• Lead security design reviews of major IT and cloud transformation initiatives • Conduct comprehensive threat and risk assessments across vendors, applications, and infrastructure to review solution architectures, identify security risks and recommend mitigation strategies to enhance the organization’s security posture

Senior Security Consultant

Deloitte

2023-1 - 2025-1 · 2 yrs 1 mo

Greater Toronto Area, Canada

• Conducted a comprehensive assessment for a client to evaluate the maturity of PAM practices and formulated a strategic and tactical roadmap to remediate the identified gaps • Proactively engaged with clients to identify standing privileged access issues and proposed potential dynamic access management solutions to help them achieve zero trust target state • Acted as a liaison between client and vendors by actively conducting capabilities assessment workshops with vendors and developing respective scorecards for optimal vendor selection • Developed business process flows and target operating model emphasizing the RACI matrix and conducted socialization sessions with Information Security teams to ensure widespread adoption of dynamic access management solution • Implemented CyberArk Workforce password management solution for a client and identified KPIs for its adoption to gauge project success • Experience in developing detailed scope of work (SOW) documents listing necessary activities to achieve milestones within defined workstreams, along with creating project plans, identifying risks and dependencies, and overseeing strategic execution to ensure successful project outcomes • Contributed towards the development of Request for Proposals (RFPs) and actively participated in client orals