Jagadeesh Kumar Eriki - Jags Email & Phone Number

Fresno, California, United States

Safeguarding CRM Assets with Enhanced Multi-Cloud Security and Incident Response.

India

Azure's Zero Trust Shield for Mercedes Benz Manufacturing Production Data Systems for America’s & China RegionIn pursuit of enhanced cybersecurity, Mercedes-Benz Manufacturing strategically ask to implement Microsoft Azure's Zero Trust model across its production processes. Leveraging Azure Security Centre and Azure Active Directory, Mercedes-Benz enforces stringent identity verification and continuous monitoring, ensuring that only authorized personnel access critical production data. The integration of Azure Sentinel, the SIEM solution, empowers Mercedes-Benz to detect and respond to potential security threats in real-time, bolstering system resilience and exemplifying a comprehensive Zero Trust Cloud Security strategy in manufacturing.Solution Implemented:Defined the scope of the implementation, including targeted systems and environments.Risk assessment done to Identify vulnerabilities, misconfigurations, and compliance gaps within the existing infrastructure by using Azure Security Centre and Azure Policy.Setting up Azure Active Directory configuration, Multi-Factor Authentication for enhanced Identity verification and Role bases Access control to restrict access based on job roles.Deployed Azure Security Centre via the Azure portal to monitor and assess security and Configured security policies within Azure Security Centre to align with Zero Trust principles.Implement threat detection and response capabilities within Azure Security Centre, integrating with Azure Sentinel for seamless SIEM capabilities.Deployed Azure Security Orchestration, Automation, and Response (SOAR) via Azure Sentinel and created test playbooks for automated incident response using Azure Logic Apps.Implemented Azure Policy and Azure Security Centre for Cloud Security Posture Management (CSPM) and defined policies within Azure Policy to ensure compliance with security best practices also regularly

India

Strengthening VOLVO Cybersecurity Posture for Cloud Infra with AWS & Palo Alto, Prisma Cloud.Closely worked with Volvo Group’s Infrastructure and Operations team to conduct an inventory of existing applications and resources across 20 data centres in Nordics and France.Closed worked with security architects and the Volvo Group’s Cloud Op’s team to design a security architecture that addresses the specific needs identified during the inventory phase.Closely working with develop teams to Identify microservices suitable for containerization based on the inventory and security requirements.Integrated containerized security components into the CI/CD pipeline for automated scalability.Integrated security checks into the CI/CD pipeline, including container scanning and vulnerability assessments and Deployed container runtime security solutions for continuous monitoring.Conducted Runtime Security Testing, Container Scanning for Security Vulnerabilities: Implemented IAM roles specifically for containerized services & Integrated IAM roles into containerized applications.Implemented service mesh solutions for secure communication and utilized mutual TLS for enhanced security between containerized services.Implemented containerization for Security Orchestration, Automation, and Response (SOAR) workflows to leverage container orchestration for automating security response actionsExtended security coverage to serverless components considering the specific needs of Volvo Group for Security measures for AWS Lambda functions.Developed IAM roles specific to logistics users with the principle of least privilege and Implemented Implemented Prisma Cloud CSPM policies for access control and secure configurations.Deployed Palo Alto Networks NGFW for securing warehouse network traffic and Implemented AWS Config for continuous monitoring of network security configurations.

India

Securing Intellectual Property, Managing Digital Certificates, and Ensuring Data Security on Google Cloud Platform for Deutsche BankDeutsche Bank's Flow App imperative for a cutting-edge security framework led to a transformative initiative on Google Cloud Platform. Focused on intellectual property protection, efficient digital certificate management, and robust data security, the bank's strategic approach ensures a comprehensive safeguarding of sensitive assets. This initiative, titled 'Integrated Security Strategies,' reflects the institution's commitment to innovation, resilience, and the highest standards of confidentiality in its cloud-based operations.Defined DLP policies to classify and protect sensitive financial data.Configured IAM policies to enforce the principle of least privilege and Implemented access controls on Cloud Storage buckets, Big Query datasets, and other relevant data storage services.Collaborated with development teams to integrate DLP into trading applications and data processing pipelines.Configured monitoring to detect any unauthorized access or data exposure related to financial models, certificate validity and set up alerts for expirationsEnhanced data security for cloud workloads using digital certificate management in assessing and defining certificate needs for securing cloud workloads.Selected appropriate SSL/TLS certificates for encrypting data in transit.Implemented Google Cloud’s Certificate Authority Service for centralized certificate management for 509 certificates.Automated certificate issuance and renewal processes for continuous encryption.Integrated certificate management seamlessly with cloud applications for secure communication.Ensuring data security for cloud-based operations through encryption and access controls.Implemented encryption for data at rest using Google Cloud KMS & data in transit using TLS and HTTPS.Implemented IAP for fine-grained policy-based access controls.

India

Comprehensive Cloud Security Enhancement for Siemens Healthcare SystemSolution Implemented:Conducted a comprehensive HIPAA compliance assessment like assessing the security controls related to protected health information (PHI) using tools like Qualys to identify vulnerabilities and compliance gaps in AWS and Azure environments.Used Splunk to analyze logs and assess the current security posture, ensuring alignment with HIPAA requirements.Designed a plan the integration of Check Point, reverse proxy, Splunk, and Qualys.Implemented a robust firewall policy to control traffic, considering healthcare-specific regulations andImplemented robust IAM controls, incorporating the principle of least privilege and ensuring secure user access to health information.Enabled encryption at rest using AWS KMS and Azure Key Vault, ensuring that protected health information is safeguarded & implemented secure communication channels through TLS/SSL encryption for data in transit.Deployed AWS Config and Azure Policy for configuration management and policy enforcement with Splunk for log analysis and real-time monitoring, along with Qualys for vulnerability management, you create a robust security ecosystem. This approach helps in proactively addressing security risks, ensuring compliance, and responding effectively to incidents in your multi-cloud environment.Configured Splunk for Centralized data aggregation, Real time Monitoring, data visualization, custom dashboards, user activity monitoring, capacity planning and notification alerts.Integrated Qualys vulnerability and compliance data into Splunk for comprehensive analysis.Regularly reviewed configurations, policies, and security controls based on insights from Splunk, Qualys, and compliance monitoring for tight Security Posture Management.Continuously Engaged with 24×7 Security Operations Centre (SOC) for Siemens healthcare system for continuous monitoring, incident detection, and response capabilities.

India

Merck's Secure Digital Transformation with AWS Cloud MigrationMerck, a global biopharmaceutical company, employs cutting-edge science to advance global healthcare. To optimize manufacturing operations, Merck sought enhanced visibility and analytics while addressing the challenge of securely migrating and managing a large volume of patient data in the cloud. Facing scalability issues with its legacy platform, Merck aimed to improve operational efficiency and ensure robust data security. Customer wanted to transform their operating model to be more robust, scalable, efficient, and agile.Experienced AWS Cloud Security Architect: Led HIPAA compliance initiatives, designed secure AWS architectures, and implemented advanced encryption and access control measures.Expert in Risk Assessment and Data Migration: Conducted comprehensive risk assessments, securely migrated patient data to AWS, and ensured data integrity during migration processes.AWS Security Specialist: Implemented multi-factor authentication, network segmentation, and continuous security assessments, enhancing overall security posture on AWS.Led risk assessment and HIPAA compliance efforts for data security, defining AWS architectures aligned with regulations.Implemented robust encryption using AWS KMS, IAM for access control, and enforced least privilege principles.Established network segmentation through AWS VPCs, isolating healthcare data, and utilized Direct Connect for encrypted data transfer.Efficiently migrated patient data with AWS Data Migration Services, ensuring data integrity and minimal downtime.Implemented AWS security tools such as Guard Duty, Inspector, WAF, and CloudTrail for real-time monitoring, threat detection, and compliance reporting.

India

I worked with cross-functional teams to implement a GRC framework, ensuring compliance with regulations like GDPR and SOX. I performed risk assessments using RSA Archer and automated compliance monitoring with Agiliance (now RiskVision). I integrated ArcSight and QRadar SIEM tools for real-time auditing and incident response. I developed and enforced data protection and information security policies, while managing incidentresponse using BMC Remedy. Risk registers and compliance metrics were tracked using Excel andSharePoint. Additionally, I followed ITIL processes and managed change control through HP Service Manager and BMC Remedy to ensure smooth implementation.