Bojan Nisavic, Cissp Email & Phone Number

El Segundo, Ca, Us

El Segundo, Ca, Us

Responsibilities:Technical Lead for IAM and InfoSec projects, from POC through all the project phases including implementation, testing and operations.Active Directory Engineer. Automate object (users, groups, organizational units), life cycle management. Custom reporting.Okta professional services. Okta application integration.Make changes to current and engineer new business processes to maximize the use of PowerShell and other Scripting Technologies and Automation whenever possible across multiple Information Security domains.Integrate IAM and InfoSec Applications and Systems with AD, LDAP, Exchange, O365, Azure, Okta, CyberArk, HRMS, ITMS, Databases, File Systems, Storage and other DCO Applications and Systems.Create Custom, Enterprise PowerShell Scripts used to report and analyze the effectiveness of IAM and InfoSec processes for managing users, computer, groups and OUs in Active Directory. Design and implement a plan for AD clean-up. Disable and remove inactive user, group and computer objects. Re-order existing OU structure to maximize efficiency for management of AD objects.Use PowerShell Scripting, to create adhoc or scheduled custom reporting out of AD, Azure AD, Okta, CyberArk and other sources of data. Create custom PowerShell automation for various tasks including user accounts provisioning and de-provisioning, custom alerting and scheduled reporting.Key Accomplishments:Using Sapien PowerShell Studio (PowerShell ISE), design and implement GUI PowerShell Forms application for user account creation in Active Directory. Created fully automated process, for synchronized removal of user accounts from several Identity and Access Management Systems (Identity Management Database - Courion, LDAP - Oracle Enterprise Directory, Active Directory. Based on “source of record” HRMS, system running on SAP, set of PowerShell scripts running as a scheduled task was designed to compare and remove user accounts from all the systems above.

Dallas, Tx, Us

Responsibilities:Manage Project Security Assessments, Data Classifications and Project Security Requirements. Establish Security Controls based on AT&T Security Policy and Requirements (ASPR), and validate their effectiveness. Validate Application Security Controls, based on OWASP guidelines and Secure Coding Practices as defined in ASPR

El Segundo, California, Us

Responsibilities:Review current Identity Management, Access Management and Directory Services controls and make suggestions for improvements. Analyze current automated solutions with focus on finding ways to improve performance. Analyze and design PowerShell scripts, used for reporting, automation and integration of Identity and Access Management Systems with Azure Active Directory, Office 365, LDAP, SAP and other systems. Troubleshoot Access and Identity issues, design solutions, test and implement. Create all accompanying documentation, including detail design diagrams.Key Accomplishments:Improved performance of an enterprise script for exporting data out of Active Directory and into the Courion Identity Database. I was able to reduce the time it took for the script to run from 40 minutes to 3 minutes. This enabled our team to run this automated task on a much tighter schedule and reduced the time needed to provision accounts for users. This had a very positive impact on our productivity and customer service.Successfully troubleshoot a long standing issue with one of our enterprise scripts which was inaccurately reporting on Office 365 license inventory and usage. Identified the problem and created a new set of scripts with additional error checking and logging capabilities. As a result of this effort, attestation efficiency and security has been increased, while downtime due to lack of license resources has been completely eliminated.Led a team effort for migrating over 1000 mail enabled groups from our Secure LDAP directory into Office 365. Created automated reporting capability to identify the groups to be moved. Designed process using PowerShell scripts recreate groups in Office 365. This dramatically reduced the amount of manual work involved with the move and also eliminated possibility of errors while enhanced consistency.

Plano, Tx, Us

Responsibilities:Security Architect and Technical Lead for the Data Loss Prevention (DLP), Data Discovery, Email Prevent, Mobile DLP and other security projects. Lead a team of four offshore resources providing standards, guidelines and procedures to follow during maintenance and operations of the DLP Systems.Collaborate with external auditors to conduct compliance audits, presenting results to senior management.Design and maintain policies, response rules and data identifiers for effective discovery of data at rest and data in motion. Key Accomplishments:Using Symantec System Requirements documentation, designed and implemented Data Loss Prevention (Vontu), and Data Insight in the large enterprise environment spanning multiple geographic locations. System was designed utilizing completely virtualized environment running Windows 2008 Enterprise 64 bit OS. This simplified design allowed for quick implementation and reduced cost to the project as well as lowered operational and maintenance costs.Enhanced functionality of the Symantec DLP product, and provided integration with Active Directory, by writing a set of scripts to consume employee data from Aveksa application running on Oracle database and using LDAP with directory services. As a result of this effort, all reported incidents coming from the Symantec Data Loss Prevention now include number of additional information such as manger email, which provide for more efficient workflow and reduce time it takes to resolve an incident.Help our Access and Identity Management group create automated solution for producing auditing reports. These reports leveraged information coming from the tool for managing UNIX accounts using Active Directory, Centrify, and the Aveksa Application. This solution is used daily by the managers attesting to their employee’s access levels. As a result of this effort, attestation efficiency and security has been increased

Torrance, Ca, Us

Responsibilities:• Perform security analysis of the current implementation of Active Directory at TMMC, and make suggestions for improvements. Work with Senior Management and other Infrastructure, Engineering and Operations Teams to outline a plan for implementation of all the security improvements. Provide best practice security consulting for multiple compliance initiatives, with a focus on providing solid solutions. Create technical implementation plans, project plans, and worked closely with customers to provide the solutions that fulfill their needs. Make changes to current and engineer new business processes to maximize the use of Scripting Technologies and Automation whenever possible in the areas of User Access provisioning and de-provisioning, Auditing, Reporting, and Information Security.Key Accomplishments:• Identified as a need and implemented Employee ID as the unique identifier for all domain users in Active Directory. This made it possible to uniquely identify user’s identity between the systems in use by Human Resources ( on-boarding process ) and AD. This was also prerequisite for all other Automation that followed and is listed in other key accomplishments below. Finally, utilizing Employee ID as unique identifier, I created a script to disable 276 domain user accounts in AD that were showing as terminated employees in the HR Systems.• Envisioned, developed and implemented fully automated process for disabling domain user accounts in AD based on Daily Termination Reports from HR. Resulted in ongoing team savings of more than 10 hours per week. In addition to workload savings, this work resulted in increased security as user accounts for terminated employees were disabled in a uniform and timely fashion. Partnered with many teams across the enterprise to perform business analysis prior to creating this highly successful service.

• Develop and maintain custom automation to support user access administration across various systems including Active Directory, Exchange, Microsoft and Oracle Databases, Remedy, VAS UNIX, Mainframe and other third-party applications.• Administer Active Directory access and security and provide support for enterprise wide production and development systems in compliance with Information Security, Privacy and Sarbanes-Oxley policies and procedures. Troubleshoot access issues specifically for distributed systems.• Perform business process engineering to support complex business rules as defined by business partner owners, new projects, product development or regulatory requirements.Key Accomplishments:• Envisioned, developed and implemented the “Virtual Service Coordinator” application. This application provides skills based routing of access requests to all access management analysts. • Envisioned, developed and implemented several scripts that automate creating, changing and deleting MS Exchange Distribution Lists and Functional Mailboxes end to end. Resulted in ongoing team savings of more than 40 hours per week. In addition to workload savings, this work resulted in improved customer service since requests are now completed within two hours of request approval 24x7. Partnered with many teams across the Schwab enterprise to perform business analysis prior to creating this highly successful service. • • Widely recognized across the enterprise as VAS UNIX SME. Partnered with many teams across the enterprise to create strategy for creation and nesting of AD Security groups needed for integration with VAS. Envisioned, developed and implemented several scripts that automate creating and deleting VAS enabled UNIX accounts end to end. Resulted in ongoing team savings of more than 10 hours per week. In addition to workload savings, this work resulted in improved security, customer service and communication.

• Installed, configured, and resolved problems on Windows NT/2000/XP workstations, servers, and laptops. Configured TCP/IP and network services and joined systems to domain. Configured and administered network printers and other resources.• Led our team in productivity and customer service ratings while working on trouble tickets and service requests. Provided numerous contributions to KBase which resulted in increased productivity and higher resolution rates of other team members.• Initiated, implemented, and documented process for Remote Access setup and troubleshooting. Provided hands-on training for SAs in our group and other groups. This process improvement resulted in increased throughput of tickets, increased productivity of all the team members, and greater customer satisfaction rates.• Provided help to Unix Design and Engineering team with regular backups and restores using our Legato software and implemented tapes off-siteing procedure to address disaster recovery requirements.• Regularly attended NT-SA and other related forums to better communicate technical issues within our department and across the organization.

Maintained outstanding customer service and productivity ratings while providing internal clients with level one desktop and application support.Clearly documented all the work using Remedy problem tracking system which lead to increased efficiency of the second level support and greater overall customer satisfaction.As a member of a two person swing shift team, provided support with high visibility, high severity levels (Sev 1 and Sev 2) tickets by following proper escalation procedures.With the help of our manager, developed and followed through a training plan to further advance my system administration skills, which resulted in my Microsoft System Engineer Certification.

Generated license keys for clients and provided help with licensing issues. Setup user accounts, user profiles and access to network resources. Researched and documented customer problems with a focus on solutions.Designed and conducted training, customer visits and presentations. Organized and exhibited at trade shows while maintaining highest customer satisfaction ratings.Provided input to the development team as needed for product improvement

Digital DesignInstalled and configured EDA applications on Windows and Solaris platforms. Worked closely with vendors and technical support on making the system's operation reliable, which resulted in less down time.Performed board level simulations of digital circuits. Configured Synopsys models for timing and functionality analysis. Edited and created VHDL and Verilog models to be used in digital circuit simulation.Worked well independently and in a team environment.

Bachelor Of Science, Electrical Engineering

Bachelor’S, Mechanical Engineering