Vidya B Email & Phone Number

Virginia, United States

• Manage CA-PAM policies, including creation, modification, and enforcement, ensuring compliance with security standards.• Schedule and monitor CA-PAM jobs, ensuring timely execution and resolution of any scheduling conflicts or failures.• Maintain and support CA-PAM appliances, including installation, configuration, upgrades, and patches.• Provide technical support and troubleshooting for CA-PAM related issues, ensuring minimal downtime and optimal performance.• Conduct regular audits of CA-PAM policies and job schedules to identify and mitigate potential security risks.• Collaborate with IT and security teams to align IAM strategies with organizational goals.• Develop and maintain comprehensive documentation for CA-PAM configurations, policies, and job schedules.• Train and mentor junior staff on CA-PAM functionalities and best practices.• Assisted in the deployment and configuration of CA-PAM, focusing on policy management and job scheduling.• Administered and supported CA-PAM appliances, ensuring high availability and performance.• Implemented IAM policies and procedures, aligning with regulatory and compliance requirements.• Provided end-user training and support, promoting awareness of IAM policies and best practices. • Led the implementation and management of the Cybersecurity Management System (CSMS) to ensure compliance with industry standards and regulations.• Piloted compliance audits to ensure adherence to automotive cybersecurity standards and regulations.• Provide consultation to design groups, cybersecurity engineers, and other cross-functional teams as necessary to support compliance• Good experience with PAM Operational tasks which includes Creating Safes, Defining Access Control, Policies/Platforms, User provisioning and entitlements, Managing Applications Credentials, Password Upload Utility Usages, CSV file creation, passwords related issues and User Access Policy Management.

Palo Alto, California, United States

• Conducted comprehensive risk assessments and developed risk management plans.• Provide technical support and troubleshooting for CA-PAM, ensuring high availability and performance of the system.• Manage user access requests, approvals, and provisioning using CA-PAM, ensuring compliance with organizational policies.• Develop and maintain comprehensive documentation for IAM processes and CA-PAM configurations.• Train and mentor junior staff on IAM best practices and CA-PAM functionalities.• Supported the deployment and configuration of CA-PAM, including integration with existing systems.• Assisted in the development and execution of IAM-related projects, improving overall security posture.• Provided end-user training and support, promoting awareness of IAM policies and best practices. • Experience performing risk assessments on IAM/PAM for potential vulnerabilities in areas including Access Manager, Password Vault, Session Manager, and SSO implementation within the organization. • Leading K2K (Keys to the kingdom) project by implementing procedures and policies which involves identifying specific risks and providing recommendations on appropriate controls based on application/platform.• Overseeing the completion of K2K (Keys to the Kingdom) users provisioning in PAM tools and worked with regulators on security process related audits.• Identify high-risk applications and platforms that are missing from current K2K report (collaborate with Enterprise information security teams to identify missing high-risk applications).• Identifying deficiencies, closing gaps, KRI’s (Key risk indicators), KPI's(Key performance indicators) and reduce the organizational risk exposure from the event of potentially or intentionally misuse of K2K level access by limiting access.

Hyderabad, Telangana, India

• Configured an automatic or transparent failover of components to the Disaster Recovery Vaults and Configured Incremental Vault data backups on component servers.• Aligned the CyberArk out of the box platforms and policies per customer’s standard security policies.• On-boarded 10,000+ high-risks privileged generic accounts on multiple target devices such as Domain, Windows, UNIX and Databases, Applications, Websites and Network Devices for a large enterprise.• Integrated the Windows services, Scheduled Tasks & Text Config for password hard-coded accounts.• Experienced in day-to-day operational support in adding and deleting accounts, applying policies, assigning safes, synchronizing failed accounts, Password rotations.• As part of support activity resolve incidents by providing proper root cause investigation of performance, configuration and data related issues. Configured the Export Vault Data Utility to automate the daily, weekly and monthly reporting tasks.• Installed, Configured, and Integrated BI Publisher with OIM to generate reports.• Creating Request Profiles. So that whenever users want to raise the requests in the form of bulk they can use this option.• Risk Assessments: Proven ability to conduct comprehensive risk assessments by identifying, analyzing, and evaluating potential risks to organizational assets. Proficient in both qualitative and quantitative risk assessment methodologies.• NIST Controls: In-depth knowledge and hands-on experience with the National Institute of Standards and Technology (NIST) Special Publication 800-53 controls. Successfully implemented and managed controls to ensure compliance with cybersecurity standards.

Hyderabad, Telangana, India

• Identify and document risks and risk mitigation strategies, facilitate the development of remediation plans, and monitor their implementation in collaboration with technical and business partners.• Assist in reviewing and validating security controls, assessing their efficacy and level of risk mitigation.• Aid in the development and enhancement of risk metrics and reporting, highlighting high-impact items through governance committees or escalation processes.• Provide recommendations to leadership on program effectiveness and propose enhancements.• Implemented procedures for the development and maintenance of solutions for Active Directory requirements.• Developed privileged identity management strategies, architectures, and implementation plans.• Experienced in managing applications by implementing AWS services which includes IAM (Identity and Access Management), Cloud Formation, OPS Work, and Security Groups.• Experience with SSO protocols, installations, and configurations, Enterprise Data Governance with Oracle tools.• Worked on Service Now (SNOW) ticketing tool for Incident management integration and generating CR (change requests) for PROD environment tickets.• Worked in an operational support role with after hours on-call responsibilities. Recommends clients on removing excess permissions and modelling views. Experience with the On-Call personnel to investigate and follow runbook activities.• Supports application change process and report on development activity status to Manager.• Understanding of the Risk Management Framework (RMF). Resolve complex authentication, authorization and integration problems• Create and maintain procedural documents (SOP's). Managed multiple projects simultaneously and was able to adapt to changing business needs and manage data risk access and enhancement audits for compliance.• Creating workflows and reports to help organizations effectively manage the privileged user groups.

Hyderabad, Telangana, India

• Worked as IAM Solutions Engineer at Ellucian and supported over 2400 clients. I work as a key contributor to the planning, analysis, coordination, support, and maintenance of our ERP systems Ellucian Banner.• Assisted in designing, developing, and management of Active Directory architecture on overall enterprise applications. Developed privileged identity management strategies, architectures, and implementation plans.• Implemented procedures for the development and maintenance of solutions for Active Directory requirements.• Expertise in designing, implementing, and managing Active Directory, Active Directory Federated Services (ADFS), Distributed File System (DFS), and Group policy management.• Access policy and control objects are being analyzed by DAG and classification of data derived from system control and used for access risk management processes.• Provide support with respect to building, configuration, and architecture of Identity Platforms Privileged Access Manager and CyberArk.• Implemented monitoring and alerting solutions for infrastructure components using HashiCorp tools.