Devin Carr Email & Phone Number

Atlanta, Ga, Us

Atlanta, Ga, Us

Atlanta, Georgia, United States

• Spearheaded implementation of enterprise-wide IAM/PAM solutions using CyberArk and SailPoint, enhancing overall security posture.• Reduced excessive permissions by 40% through implementation of role-based and attribute-based access control models.• Decreased manual interventions in user lifecycle management by 70% through automated workflows.• Improved access review efficiency by 50% using a risk-based approach.• Reduced identity-related incidents by 25% through comprehensive IAM/PAM training programs.• Led migration to cloud-based identity platform, resulting in 30% reduction in operational costs.• Led the implementation of a Privileged Access Management (PAM) solution, including password vaulting, session monitoring, and just-in-time access provisioning for critical systems.• Developed a comprehensive set of IAM policies and procedures, aligning them with industry standards (ISO 27001, NIST) and regulatory requirements (SOX, HIPAA, PCI-DSS).• Architected and implemented a multi-factor authentication (MFA) solution, integrating risk-based authentication to balance security and user experience.• Designed and deployed an identity governance framework, implementing segregation of duties (SoD) controls and access certification campaigns to mitigate risk of unauthorized access.• Developed custom reports and dashboards for IAM/PAM metrics, providing real-time visibility into the organization's identity posture and compliance status.• Led the migration of on-premises IAM systems to a cloud-based identity platform, resulting in improved scalability and a 30% reduction in operational costs.• Conducted security assessments of IAM architecture and implemented enhancements to address identified vulnerabilities, improving the overall security posture.Tools/Technologies: CyberArk, SailPoint, BeyondTrust, Okta, Microsoft Active Directory, LDAP, OAuth 2.0, SAML 2.0, Multi-Factor Authentication (MFA), XACML, Azure AD, AWS IAM, ForgeRock, Ping Identity, Python

Atlanta, Georgia, United States

• Architected and implemented comprehensive data security protocols, focusing on data classification, encryption, and access control.• Designed and managed RBAC and ABAC systems, ensuring principle of least privilege across critical systems.• Implemented Zero Trust architecture, integrating MFA and continuous authentication mechanisms.• Led integration of IAM systems with DevOps pipeline, ensuring secure CI/CD practices and container security.• Implemented and maintained Identity and Access Management (IAM) policies for cloud infrastructure, ensuring compliance with GDPR, CCPA, and industry-specific data protection standards.• Conducted regular security assessments and penetration testing to identify and remediate potential vulnerabilities in data storage and transmission systems.• Designed and deployed a Zero Trust architecture, integrating multi-factor authentication (MFA) and continuous authentication mechanisms across the organization's digital assets.• Implemented privileged access management (PAM) solutions to secure and monitor high-risk accounts, including just-in-time (JIT) access provisioning and session recording.• Developed and delivered security awareness training programs focused on identity protection, phishing prevention, and safe handling of sensitive data.• Collaborated with legal and compliance teams to ensure adherence to relevant data protection regulations, conducting regular audits and producing compliance reports.• Supported the Implementation of a robust data loss prevention (DLP) strategy, focusing on protecting personally identifiable information (PII) and other sensitive data types.• Led the integration of identity and access management systems with clients DevOps pipeline, ensuring secure CI/CD practices and container security.Tools/Technologies: Okta, CyberArk, Microsoft Active Directory, LDAP, Python, AWS IAM, Azure AD, SIEM tools (Splunk, ELK Stack), Docker, Kubernetes, GitLab CI/CD, Hashicorp Vault, SailPoint IdentityIQ

• Conducted data mining and statistical analysis on user access patterns, contributing to IAM policy optimization.• Developed dashboards for user behavior analytics (UBA), aiding in early detection of security anomalies.• Assisted in developing a machine learning model to predict potential access anomalies, enhancing proactive threat detection.• Utilized Python and AWS tools to automate the analysis of entitlement creep, helping to enforce the principle of least privilege across user roles.• Performed in-depth analysis of multi-factor authentication (MFA) adoption rates and effectiveness, providing data-driven recommendations for improving overall security posture.• Assisted in the development of a machine learning model to predict potential access anomalies, enhancing proactive threat detection capabilities.• Contributed to the creation of custom reports for compliance audits, ensuring adherence to regulatory requirements such as SOX and GDPR.• Participated in cross-functional projects to integrate identity analytics into the broader cybersecurity ecosystem, improving overall threat intelligence.Tools/Technologies: Python, AWS (IAM, CloudTrail, CloudWatch), Excel, JavaScript, HTML, CSS, Node.js, SQL, Tableau, SIEM tools

Associate'S Degree, Computer And Information Sciences And Support Services

Computer Software Engineering

Ios And Swift Essentials

Computer Science