Sandeep Gundapaneni

Manage Enterprise Security, Cloud security, Network Security, Vulnerability Management, PKI, Data Security, Cryptography Services and DevSecops/SDLC

Manage Vulnerability and misconfiguration management, CI/CD & Container Security, Network Security and Cryptography(Keys and Secrets Management)

The Forbes Technology Council carefully vets all of its members, ensuring they have demonstrated a track record of transforming the industries they lead. The council extends invitations to join only to those who meet their rigorous standards. This provides council members with an invaluable opportunity to network and collaborate, working together to make the technology landscape a better and safer place for businesses and individuals to thrive.

Visa Zero Trust & Just In Time Access: Contributing as a key member of the committee for Visa’s Zero Trust architecture migration initiative. Changed Production Access Paradigm- Just In Time (JIT) using an incident management system (Service Now), Centralized Policy Authz Engine (PAP, PDP) and Role Based Access Control (RBAC) & Attribute Based Access Control (ABAC). Reduced 1Million+ standing production access to 60K assets. Home Grown Security Full Stack Applications: Manage full stack portals with Tier 0 Availability needs in security engineering. Portals support Fine-grain Permission Management (ABAC,RBAC), 1 million+ permissions managed. Security Assessments, various features related to 1000+ internal and external applications Password Management: Facilitates password resets for privileged and regular accounts for 25000+ employees Risk Register for GRC: Governs the life cycle (scanners, reminders, escalation) of more than 10000+ findings every month. MFA Portal: 10000+ employees use this for managing Yubikeys for FIDO2 authentication. Vulnerability Management system: Automated Patching & Scheduling that reports vulnerabilities and security non-compliance scan results from 60000+ linux and windows servers in a roll up dashboard with appropriate ACL. Bastion hosts for enterprise (RDP,SSH,VNC, Web-based) enabled with Just In Time Access using Ephemeral SSH Certificates for 15000 enterprise privileged users. Session recording enabled , generates 1TB+ data every day. AWS Cloud Adoption: Lead strategy for cloud migration for mergers and acquisitions. Build strategy for extending infra and data security controls for 10 M&A companies to coexist along with on-prem systems. Enable access paths for cloud access from user desktops Platform Security Services: Manage modern authentication systems for Single sign on and Multi factor authentication using FIDO2 web AuthN.

Production Access -Privileged access management using SUDO: Build and sustain highly available, reliable solutions such as Visa Managed sudo with session recordings. With state of the art encryption, this solution is used by more than 60,000 unix servers, 10000+ admin users. System generates more than 10 million documents per day , data is persisted with encryption at rest other data privacy controls and used for cyber forensics investigations. Production Access -Privileged access management using SSH Keys : Manage SSH Key management to govern key-based access using a home grown analytical system. Scans 60000 servers , 5m+ ssh key authorizations daily , Reports and manages violations from approved security requirements. All violations are managed through the GRC portal. Manage analytical rule engine using big data tools to detect violations from various security streams and persist data using robust data pipelines. Analyzes more than 100 million records daily using Scala with Apache Spark.

- Lead team of Enterprise Security engineers - Part of Core team to build IAM program: Access Requests, Access reviews, Single sign on, Privileged access management, Role Engineering, Joiner Mover leavers etc - Partnered with various Application teams to onboard them to IAM program. - Define multi year roadmaps, and present weekly status to executives

- Architect and develop Internal purchasing portal. - Modernize UI and apply newer App sec controls for better adoption and security - Reduced manual work by 5000 hours/year .

• Design and development of business components using advanced java design patterns. • Design application security for content management. • Design APIs for externalizing key operational features for content management • Implementing state of the art UI functionalities to improve tool usability.