- Assisting OCISO in SRC functional area in performing Security Compliance Assessment for Amazon services provisioned on On-premises and AWS Cloud Platform of different engagements.- Assessing Access Management, PAM, Cryptography, Change Management, Incident Response Plan, Change Management, SDLC process, Firewalls and NACLs, Capacity Planning, Auto Scaling, Peak readiness, Audit logging & Monitoring, Log group configurations and retention, VAPT review for criticalapplications, DB… Show more - Assisting OCISO in SRC functional area in performing Security Compliance Assessment for Amazon services provisioned on On-premises and AWS Cloud Platform of different engagements.- Assessing Access Management, PAM, Cryptography, Change Management, Incident Response Plan, Change Management, SDLC process, Firewalls and NACLs, Capacity Planning, Auto Scaling, Peak readiness, Audit logging & Monitoring, Log group configurations and retention, VAPT review for criticalapplications, DB backup and restoration tests, Operation readiness exercise, BCP & DR Simulation exercises, Patch Management, Threat Modelling, code scans and production deployments controls as part of risk & compliance checks.- Creating mechanisms for compliance monitoring, reporting, and maintaining documentation for the findings and exceptions.- Involved in implementing the controls to create a common integral framework to perform control testing for applications & services - Review and follow up on the corrective actions in closing the finding- As a Manager under Risk Assurance portfolio handling a decent team size which includes Seniors and Associates to conduct Security Maturity assignment to one of the manufacturing industries- Evaluated key areas including IS Governance, Cloud Governance, Risk Management, Access Management, Data backup Strategy, Incident & Change Management, BCP/DR, Patching, Capacity management, Data Security & Network Domains processes- Drafting of the Risk Control Matrix (Issue Tracker), Draft & Final reporting with gaps and recommendations.- Performed Physical visit to Data center and assessing the Data center controls- Created a whole new approach for ITGC & Cloud (snowflake) assessments for clients and helped organization in drafting the proposals.- Hands on experience in assessing AWS, Azure and Snowflakes environments- Driven teams in achieving required skills and provided trainings on various GRC areas. Show less

- Worked as a Security Architect and successfully led a team in the Vendor Risk Management process for critical vendors.- Conducted a thorough review of vendor network diagrams and collected artifacts based on domain processes.- Executed risk assessments, identified potential risks, and collaborated with vendors to implement effective mitigation strategies, ensuring compliance with industryregulations.- Played a key role in reviewing and negotiating contractual agreements with… Show more - Worked as a Security Architect and successfully led a team in the Vendor Risk Management process for critical vendors.- Conducted a thorough review of vendor network diagrams and collected artifacts based on domain processes.- Executed risk assessments, identified potential risks, and collaborated with vendors to implement effective mitigation strategies, ensuring compliance with industryregulations.- Played a key role in reviewing and negotiating contractual agreements with vendors, with a specific focus on security clauses, data protection, and incident response protocols.* Lead Risk Consulting* Security assurance and assessments* Client Due Diligence* Cyber Security strategy implementation* Information Security frameworks implementation* IT Control testing* Risk & Compliance member* IT General Controls.* Third Party Risk Management* Corporate Security on enterprise level Show less

As a Cloud security Consultant & Off-shore Lead:-Provisioning and supporting On-premise & Cloud environment. -Handle security configuring including Fire wall rules, NACLs, IAM, Logging and Monitoring alerting and Notifications.-Performed OS hardening requirements such as satellite server registration, Installation of packages,modification of configuration files, Kernel and huge pages settings, creation of accounts, users and groups, Security limits and so on as part of bootstrap… Show more As a Cloud security Consultant & Off-shore Lead:-Provisioning and supporting On-premise & Cloud environment. -Handle security configuring including Fire wall rules, NACLs, IAM, Logging and Monitoring alerting and Notifications.-Performed OS hardening requirements such as satellite server registration, Installation of packages,modification of configuration files, Kernel and huge pages settings, creation of accounts, users and groups, Security limits and so on as part of bootstrap file while spinning the VM based on the SAP Application technical document, SAP recommendations and patch management on Red hat Linux VMs-Architected, designed, and developed cloud infrastructure (IAAS) for SAP environments, SAP HANA, SAP non-HANA Application Server and SAP ASE for SAP PI, SOLMAN, GRC, BW and BW PORTAL applications on Google cloud & Azure platform-I have been part of both migration team, engineering team and administration team as per the client request.-Involved in design and implementation of Shared VPC and service projects on two regions-Provisioned VMs based on primary and DR regions-Involved in established AWS S3 to snowflake Data Pipeline-Implemented snow pipe to load the stream data from AWS and Azure cloud platforms-Loading of data from AWS S3 bucket, XML, Delimiter files, My SQL DB on to snowflake storage-Involved in Internal Audits for Cloud governance, worked with Audit team and demonstrated the Audit report to the Audit committee-Worked on RFPs, cost and budgeting for project biddings. Demonstrated the competency and capability of technology and resources with the clientsAs a Consultant & Middleware Specialist & Admin:-Installation and administration of Application Servers on multiple Walmart store & Sam’s Club store servers.-Handled responsibilities include managing, configuring, troubleshooting and Planning documents & implement changes using through change management through the configuration management process. Show less

-Involved in Level 1 and 2 Support.-Involved in production support on-call.-Installed and Configured IBM WAS & WMQ on Windows and Linux systems.-Support the WAS & WebSphere MQ infrastructure on the production environment.-Proactively monitor the middleware and Perform daily on call tasks (checking errorlogs, Fail overs of applications & queues) to maintain a healthy system.-Installation and configuration of Tomcat application servers for reporting

-Worked as Deployment Engineer, handled deployments of web and enterprise applications on Tomcat and Jboss Application Server on Linux and Windows.-Key activity includes WAS & MQ server; client-Installation, Configuration including clustersetup, Troubleshooting related issues, Backup and Monitoring.-Day to day administration and maintenance of the Web Sphere Application server -Shipping inactive logs on daily basis and applying fix packs on weekly basis.-Configuring SSL… Show more -Worked as Deployment Engineer, handled deployments of web and enterprise applications on Tomcat and Jboss Application Server on Linux and Windows.-Key activity includes WAS & MQ server; client-Installation, Configuration including clustersetup, Troubleshooting related issues, Backup and Monitoring.-Day to day administration and maintenance of the Web Sphere Application server -Shipping inactive logs on daily basis and applying fix packs on weekly basis.-Configuring SSL using self-signed certificates on QA environments.-Coordinating with Application users to support SIT, pre-production, UAT and productionphases.-Delivery of robust builds for all environments during the peak delivery times effectivelyand efficiently. Show less

-Involved in application development, deployments and release activities.-Performed deployments of EAR and WAR file on JBoss & Tomcat servers-Involved in application development, build and deployment activities.-Developed Action classes for performing the execution of Logics.-Developed delegate functionality and Session Beans.-Implemented Hibernates DAO for executing the logics of various JSP’s.-Deployment of ear and war files on Jboss and tomcat Application… Show more -Involved in application development, deployments and release activities.-Performed deployments of EAR and WAR file on JBoss & Tomcat servers-Involved in application development, build and deployment activities.-Developed Action classes for performing the execution of Logics.-Developed delegate functionality and Session Beans.-Implemented Hibernates DAO for executing the logics of various JSP’s.-Deployment of ear and war files on Jboss and tomcat Application servers.-Implemented model components and Connection pooling to connect to the Database. Show less