• I specialize in Cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), Identity Governance and Administration (IGA), and Single Sign-On (SSO).• My expertise includes managing the entire Identity and Access Management practice, which involves supporting with Architecture, Design and Deployment, Implementation, and end-to-end delivery of the following product solution areas: Privileged Access Security (CyberArk), Access Management & Single Sign-On (OneLogin), Server Protection (Silverfort), and Password Management (Dashlane).• I am responsible for team management and maintaining effective utilization of resources. I establish the Centre of Excellence, team enablement, escalation handling, scope of work, project plan, requirements mapping, HLD, and LLD creation.• I maintain and develop knowledge, skills, and competencies in security solution implementation in more than one specialist area. I help the organization target architecture for infrastructure privileged access and the high-level requirements for privileged access management solutions.• I lead the project execution by bringing in technical and functional processes for IAM/PAM projects, ensuring project delivery with effective coordination between the client and project team.• I am a technical and functional expert in solution designing and implementation for enterprise role-based access, and privilege access security. I have vast experience in the installation, configuration, and implementation of specialized IAM products.• I manage a team of 7 members, including their personal development plans.

I have extensive experience in building a Privileged Account Management (PAM) team from the ground up, from recruiting to onboarding. As a team leader for CyberArk and Onelogin, I was responsible for ensuring that all key financial applications were secured and managed using CyberArk and Onelogin's SSO (Single Sign-On). This involved managing admin, infrastructure, and service accounts, and facilitating seamless authentication with Multi-Factor Authentication (MFA).I ensured that the applications were fully compliant with critical audit control requirements such as Just-in-time access, Password Management, Privileged Account Management, third-party and Vendor Account Management, and Leaver Management. To minimize risks, I followed industry standards for controlling privileged access, such as Privileged Session Monitoring and MFA enforcement. Moreover, I supervised the hard-coded credentials in all key financial applications using the CyberArk tool and ensured that passwords were required for jobs to run without any manual intervention.

I am the designated point of contact for the IAM Engineering team, and my role encompasses various responsibilities. My primary duty is to administer, operate, manage, execute, and govern the IAM process and tools for centralized identity, Access provisioning and de-provisioning, Recertification, RBAC and ABAC in a global environment that includes over 3000 retail stores in the UK. My primary objective is to ensure that the IAM service remains compliant and secure, access requests are controlled, and users receive optimal support. Additionally, I am responsible for providing support during audits and providing requested evidence related to IAM activities and their recertification. I also liaise with IAM product vendors to resolve product-level issues. To streamline the user access-related issues in IAM, I have built a team of 6 members who handle all such concerns. This has centralized the user access-related issues under IAM, which has benefitted the organization.

I was one of the main members responsible for building the IAM project from scratch for Tesco, which has 3000+ stores in the UK. My role involved diverse experience in understanding HR systems and bringing them into the IAM scope. I worked with the application team to ensure that the IAM identity was integrated into their system, which included associated mapping. I also established a centralized governance process for approval, provisioning/de-provisioning to all target systems (500+). Additionally, I created automated reports for the business to help them understand orphan accounts.

I was one of the key contributors in building IDaaS. I worked with a colleague from Capgemini Netherlands to build the solution using Aveska, Forgerock, and CyberArk. I conducted training for over 50 colleagues in various Capgemini locations, including Bangalore and Chennai.

I have experience working at Lloyds Bank, one of the largest banks in the UK. My area of expertise lies in implementing and configuring various modules, including reviews, application onboarding, roles, rules, workflows, forms, change requests, and access requests. During the project, I trained over 30 resources and acted as the Subject Matter Expert (SME). I was recognized as the best performer in the project.