Noman Arshed

Achievements: Successfully remediated 100K+ uncorrelated application accounts as part of Orphans remediation project, 100% success rate for running Different certifications using SailPoint Highlights: Analyze and assess current state of orphan (uncorrelated) accounts in SailPoint for 500+ on boarded applications and work with different stake holders to design, develop and implement remediation process in SailPoint (IAG). • Create and manage technical documentation for new solution to manage Non-personal (generic and service) application accounts (including AD) in SailPoint. • Created and manage application roles in SailPoint (IAG) post application onboarding and during various certification campaigns • Work with Data loss prevention (DLP) team to identify PII, PCI, HIPAA and GDPR compliant data for certification scope • Lead FAM (File Access Manager) Certification with 100% success rate for data hosted on NetApp and SharePoint Online to comply with NY DFS 500 regulations. • Lead and assist EAG (Enterprise Access Governance) team in different certifications to achieve 98% + compliant rate • Provide ACM (Access Control Matrix) review during application onboarding to ensure all business/technical roles are properly defined before promoted to SailPoint (IAG) during application onboarding • Work with QA team to do functionality testing and validate different use cases for SailPoint FAM using HP application lifecycle management tool. • Work with application and Engineering team to decommission application from LAM including meta data cleanup • Perform functionality testing in SailPoint (IAG) post upgrades to ensure all relevant functions working fine. • Work with Provisioning teams to improve process for network shares access and Shares Owner identification and remove non-compliant application accounts post certification(s)

Achievements: Successful implementation of an alternative enterprise-wide solution on the administration of access to Workstation local admin. Providing consulting services on Active Directory consolidation of 16+ domains into one single directory for simplification. Successfully tested and implemented CyberArk Privilege Endpoint Delegation Module (PEDM). SailPoint File Access Manager role out enterprise wide. Highlights: • Provide guidance, training and lead a team of 5+ Analyst to ensure the implementation of best IAM practices • Develop and maintain Service Now dashboard to monitor SLAs offered by team • Create Services Catalogue and published it using SharePoint for better customer experience and SLA compliance • Provide solutions for different applications to use GID/FID for SAML and/or active directory for SSO authentications • Work with Azure team to sync on-prem AD user attributes for application authentication hosted on cloud • Develop and document process to create Key Tab files for application authentication using Active Directory • Work with different teams to consolidate their personal admin access into Firecall (Shared Admin accounts) hosted on Centrify PAM • Work with developers to create new forms in Service Now for services offered by identity lifecycle management team • Work with different stake holders to develop alternative solution for Workstation local admin for security and compliance • Work with Deloitte to develop a framework for Active Directory group life management and new naming convention in AD domains • Design Privileged access management (PAM) solution for different provisioning teams to mitigate Risk • Work with different vendors for PEDM POC for workstation local admin access & governance • Work with different stakeholders to design Service Now form to automate PEDM access in CyberArk • Work with external/internal auditors for SOX controls annual testing

Achievements: Implementation of fine grain policy for Linux/Unix accounts for AD authentication. Deployment of Centrify Unix-AD Bridge to manage UNIX user’s authentication through Active Directory. Migration of SWIFT application to SWIFT Secure Network • Provisioning of unique identity (ScotiaID) and AD accounts using Sun Waveset and SailPoint IIQ • Updated user profiles in Citrix, Active Directory and GID for various applications access • Running SQL queries to search different database tables as required and coordinated with IAM Engineering team to run different queries to update SQL database tables for auto-provisioning • Provide Delegated Admin access in Active Directory to helpdesk and Local Area Administer (LAA) to support business unit employee • Develop Active Directory cleanup process for user accounts (Disable/Delete AD) using PowerShell to comply with Audit requirements. • Updated Active Directory attributes for users and groups in bulk using VBScript as part of SWIFT user migration project. • Use RoboCopy utility to recover lost data along with permissions hosted on NetApp devices • Manage and apply Security and Share permissions for user access in accordance with least access principal • Work with SWIFT provisioning team for user access issue for Secure network or Swift application • Create/update management guide for admins and training guide for users to change password using IDM • Ran licensing reports for Centrify Unix AD bridge for various environments to keep a track of available licenses for servers onboarding • Successfully tested and implemented fine grain policy for Unix service accounts at domain level regarding account lockout and minimum password length for Centrify Unix AD bridge initiative. • Maintain/troubleshooting user access to Privileged access tools (Password Authority/Centrify PAS) • Managed user’s privileged access to servers and domain using groups in Cloakware/Password Authority/Centrify PAS.

Achievements: Active Directory upgrade from 2003 to 2008. Citrix upgrade from 5.0 to 6.5, Decommissioning of Active Role Server, Active Directory onboarding to IDM Waveset • Provision and De-Provision domain accounts using Active Role Server (ARS) and Active Directory Users and Computers (ADUC) • Moved users across different groups/OU’s for Exchange/Citrix Migrations/AD Consolidation projects using script • Work with Microsoft engineers to troubleshoot permissions issue regarding Cluster/Listener SQL AD objects • Delegated permissions to users to manage objects in OU’s in domain • Create/Manage groups and users using batch files. • Work with user support team to identify and solve Citrix access issue during migration • Created user accounts and assign them appropriate group membership for different applications access • Work with project team during AD onboarding to IDM Waveset for user account auto-provisioning • Participate in various testing’s regarding user provisioning automation based on different logics for different domains • Work with different provisioning teams to onboard privileged (Admin) accounts into Password Authority • Create and manage privileged ID's on domain, windows servers and Global identity and register them into Privileged Access Management tools (Cloakware Password Authority) for shared access • Actively participate in troubleshooting for Privileged accounts in Cloakware for user access • Add firecalls (Privileged accounts) into different set in Cloakware for user access. • Create and maintain local/domain service accounts in PA and target servers including domain controllers • Worked with different stake holders to identify owner of AD Service/Application accounts to manage using Cloakware (PAM solution). • Use ARS (active role server) to document evidences for annual audit. • Assist different business/support teams to collect Audit artifacts using ARS