Janet Deveau Email and Phone Number

Global Identity Engineering - Phase1 global project tackling move from manual enterprise identity provisioning based on OIM to new Identity Governance Administration (enterprise and cloud) by Saviynt. Project management and development using Microsoft Azure DevOps, Microsoft Teams, Office 365.

Business Analyst – Information Security Threat Technology projects. Information gathering with business owners, technical leads and project managers, following Latitude project process and templates. • McAfee infrastructure refresh, Avecto Defendpoint deployment for improved application control to manage user installation of authorized software while reducing risk. Documented new administrator support.• Security hardware refresh for Cisco Firepower and RSA NetWitness, coordinated with business, vendor and global teams. Use Cases for Test validation, project documentation.

Identity IQ project reviewing high risk legacy entitlements with their data owners by end of year, to verify risk level related to data types, personal information (private, sensitive, health related), and offshore use.• Met with identified data owners to review and update risk information for their entitlements• Align ownerless entitlements (low risk) with application owners to review if any should be high risk• Prepare updated entitlements for data import back into IIQ.

Analysis of business requirements to implement application life cycle management improvements, specifically focused on contractor identity access, cradle to grave. • Developed scope for business owner and high level business requirements for development planning.• Documented and verified current process with business subject matter experts.• Defined and prioritized future features as directed by business owner.• Worked together with architect, project managers, developers and UI/UX designers to provide Agile use cases and user stories.

Developed and reviewed access entitlement roles in Sailpoint IdentityIQ v6.3, improved application access requests, approval automation and self-service capabilities to add new users while updating access for existing employees. • Worked with business partners to capture business requirements.• Troubleshoot with development team and provisioning partners as needed.• Expand processes covered by IIQ, and automate where possible.• Document IdentityIQ best practices for enterprise Information Security Resource Library

Global Information Systems - Identity Management Analytics (IMA)Continue multi-year Service ID project, on small team focused on resolving audit issue. Partner with subject matter experts in applications, platforms, server log monitoring, support, metrics to get picture of how service accounts work. Review provisioning process for machine Service accounts on all platforms in the enterprise. Create missing procedures, and identify gaps. Create new process to support tightened security policy and improve governance.Manually research and identify appropriate owners. Guide owners to correct process and action. Leverage automation where possible, such as aligning service accounts to applications, instead of individual owners.Review what the service ID is used for, and how it should be managed and reviewed. Follow change management best practice to document all use cases, show current state flow and assist with creation of future state.Partner with development team creating new owner attestation process. Provide detailed documentation as the project rolls to business as usual operations.

TEK Systems contractor for Bank of AmericaGlobal Information Services - Control Gap RemediationUsed technical and risk analysis knowledge to drive implementation of secure solutions for identified application vulnerabilities. Supported and monitored business remediation progress to closure of control gaps.Identity & Access Management - Service ID ownership identificationShort term assistance to Service ID team to identify ~10k IDs, per audit requirement, using Active Directory, business hierarchy, Runbook, OIM, Hitachi ID Management tools.

Separation of Duties Program monitoring, reporting and addressing elevated developer access in Production environment

Account Provisioning for Rush University Medical Center hospital and associated university students using Account Tracking, network, Active Directory permissions, Exchange/Outlook and EPIC accounts. Windows XP / 7 Microsoft Office 2010 environment.

Identity and Access management using Oracle Identity Management to review user and system access across corporate platforms and resources. Deep knowledge of related tools and process required to understand, identify issue, and correct access. Coordinate with various support teams and requesters to resolve issues.

ID Provisioning automation projectShort Feasibility study: Research and document current provisioning process to assist I&AM Architect designing future automatic ID provisioning for AS400/Fundmaster & Unix/LDAP accounts.

temporary bookseller

Privilged ID access administration, process and application transitions and shared data migration from LaSalle Bank and Countrywide Mortgage acquisitions to Bank of America network

2006 Analyzed and standardized secure application access for ABN AMRO. 2007 Standardized quarterly user reviews with best known audit practices for LaSalle Bank. 2008 Transition of applications and users to Bank of America systems. 2009 Shared data migration from acquisitions to Bank of America network.

2006 Analyzed and standardized secure application access for ABN AMRO. 2007 Standardized quarterly user reviews with best known audit practices for LaSalle Bank.

2008 Transition of LaSalle Bank applications and users to Bank of America systems. 2009 Shared data migration from acquisitions to Bank of America network.

Analyzed and standardized secure application access for financial institution ABN AMRO in accordance with Sarbanes Oxley requirements

built /deployed XP workstations for Boston MA financial institution

Technical support for volunteer organization - helped develop email mentoring program that partnered professional women in technology with middle school students. Was associated with http://worldwit.org/ a resource for professional women to share ideas, network, mentor, and learn on a local and global level. See AskLizRyan where many former members went.

LAN Administrator for general users and Verizon National Market Call Center. Lotus Notes 5 upgrade to 6.0. Merged two call center groups into a new location; reconfigured the network from static TCP/IP to dynamic addressing, and upgraded call center desktops from NT to XP, without interrupting call center availability.

Engineering support for Windows NT/2000 applications & Unix environment. Northeast corporate virus/security expert. Administrator for Unix and MS Windows 2000 client/server Active Directory

Windows NT/2K, Lotus Notes and engineering support for VPN network company that served small and mid-sized businesses. Acquired by Intel Corporation

Senior level support for development groups (Notes, Freelance, Organizer, Smartsuite), configuring multi-boot systems for building and testing developing software. Increased emphasis on OS/2 Warp Connect. NT 4.0 Beta, Merlin Beta. Worked with QE counterparts on Product teams (1-2-3, Freelance, WordPro, Approach, SmartCenter, ScreenCam, Odyssey, and Organizer).