Deepak Bhattarai Email & Phone Number

• Implemented CyberArk 9.x in HA Environment, Completely responsible for the configurations and integrations of multiple domains LDAP integration, SAML integration.• Responsible for privileged User account administration of various Windows, ESX and UNIX accounts. • Created Custom CPM Plugins according to Environment Password prompts behavior. • Assist in the ongoing design and engineering of the Cyber-Ark solution version and on boarding including identity management, policy management. • Analyze new request in operation related to privileged access of servers, database, network devices to manage policies of CyberArk.• Coordinate and work with vendors support to provide optimal solutions to resolve all customer issues and provide support to all system design. • Creating and assigning Safes, reconciling accounts, rotating passwords. • Created AD users and groups for safe delegation and updates. • Conducted workshops with application and infrastructure teams about on-boarding privileged accounts.• Assist application teams with CyberArk application Identity Manager integrations and linked accounts. • On-board privileged accounts and application ids with CyberArk upload utility or PVWA • Ensure ongoing CyberArk system Maintenance is scheduled and completed on time. • Creating a new application on board is documented and implemented. • Coordinate with CyberArk support teams for escalation and resolution issues • Ensure that all Identity and access management services are secure, available, efficient and meet defined corporate services levels • Co-ordination with the offshore support teams to address technical or business requirements related queries. • Involved in both Sever System analyze and Security support on CyberArk as well as Support on Security on Windows servers.

• Extensive knowledge with CyberArk EPV in HA Mode with MS Clustering.• Creation of policies and reports in PVWA. • Administration experience of CyberArk vault with Safe creation, integration with LDAP and other authentication methods. • Integrated with Active Directory (LDAP), 2 Factor Authentication (RADIUS). • Defined, developed, and documented IDAM services including Single Sign-on, Self-Service registration, workflows, user management, management dashboard, Role Base Access Control (RBAC), Attribute Base Access Control (ABAC), resource and business layers Provisioning, credentialing, federation, and auditing. • Involved in application to application credential management. • Defined user account settings through Active Directory and used Active Directory to create, modify, and manage user, computers, and group account. • Experience in performing Privileged Account Management with fair understanding the underlying business processes. • Responsible for determining the target Privileged Session Management (PSM) audience. Determine what infrastructure and systems PSM will target (servers, virtual servers, database) • Performed internal configuration of PSM to the vault itself • Installed, configured disaster recovery Vaults and DR services • Maintain development, testing, and production systems. Coordinate maintenance with support teams • Perform Penetration testing and vulnerability assessment to improve application security.

• Involved Installation on CyberArk component on various servers and Setup Privileged password management Policies for CPM component. • Creating safes and adding users and groups to them for privileged access in CyberArk and Creation of policies and Reports in PVWA. • Installation and configuration of CyberArk Private Ark client and Private Ark server and CPM, PVWA, PSM, PSMP, DR. • Good understanding of policies in CyberArk Central Policy Manager (CPM) and (PSM). • Resolved CyberArk issue's in CPM to communicate with a host to reconcile credentials. • Prepared tickets about the issue and informed to the higher specialists. • Alerting suspicious activity or instances observed on their networks, such as DDoS attempts, Cross-Site Scripting, or malware infections, then providing recommendations and solutions to handle them. • Provided guidance in adding, removing, change and lifecycle of Privileged Identity Management (PIM) in order to provide the highest quality levels of Security. • Retrieved CyberArk system and application password's and assist Database, Linux, and Core Application Support teams when passwords are needed. • Good knowledge in Active Directory and Involved in AD integration and adding user to with their privileges.

• Installation and configuration of the EPV components (Central Policy Manager, Password Vault Web Access, High Availability Vault Cluster, Secure Zone Access, SAN storage, SSL certificates and Load Balancing • Respond to vendor security questionnaires and review contracts and RFPs. • Involved in investigating and respond to security incidents. • Review Firewall & load balancer change requests • Performed in the role of subject matter expert in the creation of use cases, project time-lines and infrastructure diagrams; Created acceptance testing plans for vault admin and user functions. • Implemented secure storage and retrieval of shared passwords, one-time passwords, exclusive, Tested and implemented administrator/root passwords from a variety of platforms such as Windows, UNIX. • Send out security newsletters and latest industry trends to the user community. • Present Compliance status and IT security metrics from various systems to the Director of IT Security. • Put together standards and hardening procedure document for various platforms. • Weekly meeting with Directors to update the IT audit closure status