Rachana Kamat

Contribute to the development, deployment, and management of Samsara’s enterprise security program. Responsible for key security systems, working directly with stakeholders and vendors to ensure seamless integration and operations. Oversee and implement security measures across Samsara's Software-as-a-Service (SaaS) platform, ensuring the protection of enterprise data and infrastructure within.

* Performed security assessments across diverse environments in corporate, warehouse, retail including SaaS platforms, corporate networks, and user endpoints, adeptly identifying and mitigating security vulnerabilities. * Led strategic initiatives to drive the adoption of Zero Trust architecture, overseeing critical infrastructure changes including DNS propagation & profiling, legacy VLAN deprecation, and implementation of advanced access controls. * Contributed to the deployment of BeyondCorp Enterprise Security Architecture features, including VPC-SC, DLP, Context-Aware Access, and Forward Proxy, enabling secure Internet access for enhanced organizational security * Implemented Kubernetes-based application for streamlined deployment of security architecture, enabling self-service capabilities to minimize manual errors and expedite approval processes.

• Lead Identity Aware Proxy implementation to design zero trust for network architecture for GCP & Azure resources for users and external services. • Assisted in Passwordless enrollment of security key in Okta for 500+ warehouse employees and presented usage statistics to stakeholders. • Collaborated with Identity Access Management (IAM) team for management of Sign-On policy, Session length, Device Trust, IDP and routing rules in Okta.

• Designed and presented a data security framework that proposed technical controls to encourage data-centric, security and privacy-by-design activities to improve the risk posture of the organization. • Collaborated with cross-functional teams for architecture reviews of Virtual Desktop Infrastructure (VDI) in Azure. • Recommended security controls for hardening Windows and Linux servers and MacOS workstations according to CIS recommendations. • Performed a threat modeling exercise for local administrator access on workstations and recommended Just-in-Time (JIT) access to mitigate the identified security gaps. • Proposed security baseline requirements of Credential guard, Windows Hello, Auto-deployment profiles, and Conditional access policies in Intune for corporate users. • Demonstrated workflow of third-party SAML applications integration with BeyondCorp Context Aware Access (CAA).

Acted as Teaching Assistant for Fundamentals of Information Assurance coursework for Graduate Degree. Hosted office hours to regularly connect with the students for course related queries. Developed labs for the course and drafted solutions for the lab questionnaire Graded quizzes and evaluated weekly discussions, assignments and labs.

Helped develop cybersecurity labs for community college students interested in learning fundamental security concepts such as PKI, encryption, network architecture, SSH management. Designed instructor guides to help with scoring standards, lab questionnaires and answers.

• Demonstrated security issues in AWS Lambda configurations and presented a defense-in-depth hardening approach using AWS services such as WAF, Config, IAM policy, CloudWatch, Step functions, KMS and SNS alerts. • Assisted in firewall configuration audit using RedSeal and python scripts for baseline consolidation. • Developed a framework for cloud security assessment of Client Access Service Brokers (CASB) as a service.

• Created a bash script for building Cuckoo sandbox to optimize investigation for suspicious MS documents, PDFs and other embedded malicious attachments. • Initiated and incorporated machine learning to improve the accuracy of DLP software and reduce false positive triggers by 86.33% • Analyzed raw logs and correlated events from Endpoint and Wireless products using Splunk Enterprise for endpoint compliance audit. • Developed and maintained an ad-hoc asset inventory by querying and aggregating assets from various asset management software. • Integrated firewall logs, Active Directory components and change management tickets to block unauthorized FTP traffic. • Discovered obsolete admin accounts of departed users using Python script to query LDAP for user attributes. • Worked with CISO to research and implement solutions to improve Bitsight ratings by 13% • Automated retrieval of device names assigned with default/blank endpoint policy using PowerShell and python script.