Riaz S.

Project: Build CyberArk Vault Cluster, Install CPM Plugins, Monthly patching vaults, Governance, Compliance, Security Controls, Identity and Privilege Accounts Security CyberArk - PAM Privilege Access Management, IAM – Identity Access Management, Identity Security • Build, manage and support CyberArk environments, Vault EPV cluster, PVWA, CPM, PSM, investigate and troubleshoot issues, resolve issues or escalate to next level or to vendor as required • Implement ad-hoc/proof of concept request as required in non-prod environment for testing purpose and create a runbook, provide training before promote to higher environment • Patching monthly update on Vault cluster through WSUS utility, run vulnerability update on component servers so Qualys report shows no vulnerability

• Work with cross functional teams to gather business requirements for CyberArk PAM initiatives • Implementing and managing HashiCorp vault solutions to ensure secure storage and access to secrets. • Utilizing REST API, OAuth, and JWT for integration and authentication. • Collaborate in the design, implementation, and operation of PAM features and capabilities. • Identified security and operation challenges and pain point and provided recommendations and solutions as per industry standards and best pracctices and vendor recommendations • Manage and support CyberArk environments, Vault EPV, PVWA, CPM, PSM, investigate and troubleshoot issues, resolve issues or escalate to next level or to vendor as required • Applied Cyberark security patches and updates, automated deployment and configurations • Create CyberArk Platforms, Safes, Policies, Workflows to enforce business process and policies • On-boarded Systems, Apps, Database, Devices, and Services privilege accounts to CyberArk • Customized and custom development of CyberArk PSM component and CPM plugins • Onboarded Authoritative application on SaiPoit IdentityIQ, provisioning and deprovisioning access request for the joiners/leavers • Onboarded the different applications into SailPoint IdentityIQ using the Out of the box connectors • Aggregate the Authoritative data from HRMS to SailPoint IdAM to provisioning to other application to consume • Provided guidance and support to team members, handled escalations, developed support guides • Worked with cross-functional teams to improve existing uses-cases and developed new use-cases • Designed and implemented authentication, authorization, RBAC policies, Roles, Least Privilege Environment: CyberArk PAM, Vault, EPV, PVWA, CPM, PSM, SailPoint, JavaScript, PowerShell, Ansible, Agile, Jira, Windows, Unix, AIX, Linux, Oracle, MS SQL, ServiceNow, XML, Restful API, Middleware, Tomcat, JBoss, SIEM, Splunk, Azure Sentinel, LDAP, RBAC, AD, HashiCorp, Azure AD

• Reviewed CyberArk architecture and design, re-designed and implemented changes per industry best practices for high availability resiliency and business continuity, and capacity for acquisition • Collaborating with development teams to set up applications for secret retrieval. • Assist in improving privileged account discovery and reporting for infrastructures, including cloud and applications. • Partner with business units to evaluate the privileges assigned to certain privileged accounts and offer recommendations for remediation. • Developed upgrade and execution plan for CyberArk, PAM, upgrade from 10.x to 11.x • Manage and support CyberArk environments, Vault EPV, PVWA, CPM, PSM, investigate and troubleshoot issues, resolve issues or escalate to next level or to vendor as required • Applied Cyberark security patches and updates, automated deployment and configurations • Implemented authentication, authorization, RBAC, credentials rotation, least privilege • Discovered privilege accounts, human, non-human, machine, systems and applications, accounts using CyberArk DNA and on-boarded to PAM solutions, CyberAK EPV, PVWA, CPM, PSM • Done account mapping with authoritative Identities to non-authoritative entitlements in SailPoint Identity • Implement integration of SailPoint IAM and PAM solution with ServiceNow and SEIM solution • On-board endpoints, systems, applications to SailPoint using OOTB connectors • Troubleshoot and fix the day to day tasks issues like mapping, correlation, write rules and etc • Create Entra ID on cloud for Proof Of Concept • Provided guidance and support to team members, handled escalations, developed support guides Environment: CyberArk PAM, Vault, EPV, PVWA, CPM, PSM, SailPoint, IDaaS, JavaScript, PowerShell, Ansible, Agile, Jira, Windows, Unix, AIX, Linux, Oracle, MS SQL, SCIM, OIDC, XML, Restful API, Middleware, Tomcat, SSO, Multi-Factor. Okta, Radius, SIEM, Splunk, Azure Sentinel, LDAP, RBAC, AD, ServiceNow, Azure AD