Evgeny Bokhan

Managed the Access Management team (IT Information Security department): 🔸I took charge of the team during the crisis period following the parent company's sudden departure. Facing significant uncertainty and constant resource constraints, I single-handedly organised and stood up our crisis management operations from scratch, despite having no direct prior experience in such a situation. 🔸I managed a seamless migration of access during the transfer of key services, guaranteeing a disruption-free experience for over 1,900 users in 4 countries across 300+ services. 🔸I authored the key access management policies (Access Control Level, Group Access Management, Data Security Check etc.) currently followed by Wargaming and Lesta Games employees. These policies helped to structure the organisation of access in companies, reduce information security risks, and increase user convenience. 🔸Over the 2.5 years, under my leadership, 1,100+ resources, 4,500+ access roles were integrated into the corporate Access Management System, and more than 70 access management processes were developed. 🔸My team became the first and only group in the IT department to successfully complete the full remediation of the parent company's legacy infrastructure by the agreed-upon deadline for the legal separation. This involved the proactive cleanup of over 23000+ access roles, 11000+ resources, and 2400+ AD groups, network objects, access groups, service accounts and other artifacts. This allowed company to avoid potential legal risks inherited from the previous company, brought structure to our access controls, improved the user experience, and lessened the load on our internal systems.

As a team lead I was the owner of two developed products in the company: Access Management System (AMS) and Data Security Check (Himera) application. Product improvements and new features resulting from my work: 1) AMS 🔸 implemented the Access Control Level attribute (based on my policy), reducing the average access audit processing time from 1.5 hours to 20-25 minutes. This impacted approximately 35 requests per month 🔸 enhanced the user interface (UI) with improved filters and advanced search capabilities 🔸 added inconsistency check for group access in AMS and the matched groups in Active Directory, which reduces information security risks (3-5 incidents per month, which are eliminated within a day after this revision) 🔸 introduced a duplicate-ignore feature for CSV access imports, reducing manual processing time by 10-15 minutes per import task. This impacted 120-130 import tasks monthly 🔸 automated access policies, which reduce information security risks and eliminate redundant requests for resource owners, resulting in a more positive user experience 🔸 added partner accounts and network objects to the system, so the access granting process for partners has been fully automated (before the implementation, there were about 70 tasks per month, each of which involved 3 teams) 2) DSC Himera 🔸 The web application was created completely from scratch according to the requirements collected and written by me based on the Data Security Check policy (the policy was also written by me) 🔸 The application automated the discovery and remediation of critical information on publicly accessible company services 🔸 Thanks to my app, the average audit task processing time for one resource decreased from 30 hours to 8-9 hours (a total of 267 resources were checked over the past 1.5 years, sensitive information was found on 81%, information was hidden from public access on all found resources)

Identity and Access Management (IAM): • integration of new services into a unified corporate access management system (Microsoft single sign-on (SSO), Active Directory, MFA, OAuth, API); • development of new standards, processes (BPMN) and policies; • reviewing and analysis of the requirements for IAM programs with expert knowledge; • performing identity and access management to support operations; • managing users' access to the systems in accordance with Access Management policies and processes for employees, partners and additional accounts (service, administrative etc); • receiving and verifying access requests, checking access right approvals, managing access rights; • keeping information in corporate Identity and Access Management systems up-to-date (data and resource classifications, risk assessments, periodical reviews); Product management & Business Analysis of internal Data Security Check application: • collection and analysis of the requirements; • documenting requirements in Use Case, User Story format and Vision&Scope document; • testing of errors and released features; • software documentation; • product roadmap, requirements prioritisation; • mentorship and training my team the application.

Managing Help Desk tickets in a timely manner: • responding to user issues and requests via phone, email, and live chat (both from English and Russian-speaking users); • providing user assistance; • Exchange administration - creating and maintaining mailboxes, distribution lists; • register user interactions in the Jira platform; • running diagnostics/troubleshoots to resolve user-reported issues; • control and monitoring messages from the alert system, and escalate them to the responsible teams; • notify users about global incidents and incident resolutions.

Technical Support