SAI ANUSHA SIRIPURAM
IAM/PAM ARCHITECT
Hyderabad,Telangana
Summary
Principal Architect designing enterprise IAM and Zero Trust security across hybrid IT and OT environments. Architects Microsoft Entra ID, PKI, and privileged access controls while automating Joiner-Mover-Leaver workflows with Python and PowerShell. Drives governance, vendor alignment, and compliance outcomes across NIST 800-53, SOC 2, and HIPAA frameworks.
Overview
5
5
Languages
10
10
Certifications
18
18
years of professional experience
Work History
Group Leader | Senior CyberArk Engineer
Concentrix Daksh Services India Private Limited
06.2023 - 12.2025
- Architected comprehensive privileged cloud solutions with CyberArk for all servers, significantly enhancing the overall security posture of critical infrastructure by 20%.
- Established and enforced Segregation of Duties (SoD) policies, role engineering frameworks, and MFA protocols, achieving 50% improvement in compliance and 45% reduction in unauthorized access incidents.
- Managed Identity Risk and ITDR initiatives, oversaw Access Certifications, mitigated 70 security incidents annually, ensured access accuracy, and improved audit success rates by 35%.
- Architected privileged cloud solutions with CyberArk for all servers, enhancing overall security posture of critical infrastructure by 20%.
Principal Architect
Unisys
01.2025 - Current
- Pioneered Zero Trust Architecture adoption by implementing Just-In-Time (JIT) access, Privilege Elevation & Delegation Management (PEDM), and advanced PAM solutions across complex, distributed client IT environments.
- Automated secure Joiner-Mover-Leaver (JML) lifecycle management processes using Python & PowerShell and implemented CyberArk Conjure for advanced Secrets Management, reducing manual effort and improving operational efficiency.
- Pioneered adoption of Zero Trust Architecture through implementation of Just-In-Time (JIT) access, Privilege Elevation & Delegation Management (PEDM), and advanced PAM solutions across complex, distributed client IT environments, enhancing security posture.
- Provided strategic IAM governance while managing senior stakeholder relations, delivering guidance on IAM technology roadmaps, vendor partnerships, and IAM Governance Frameworks to ensure compliance with NIST 800-53, SOC 2, and HIPAA standards.
- Led architectural design initiatives for complex IT systems, ensuring alignment with business objectives.
- Developed and implemented enterprise-level architecture frameworks to enhance system interoperability.
Technical Lead (CyberArk)
Wipro Enterprises iPfi Limited
05.2018 - 06.2023
- Managed 12 identity management projects and over 200 multi-application integrations, developing migration frameworks documented through High-Level Design (HLD)/Low-Level Design (LLD) and integrating with ServiceNow ITSM to streamline processes.
- Drove provisioning automation efforts, halving enterprise account provisioning time and boosting user productivity by 20% through strategic CyberArk automation and PowerShell scripting.
- Led access risk assessments and role engineering initiatives to significantly reduce network vulnerabilities, while mentoring cross-functional teams to enhance overall productivity by 20%.
- Led access risk assessments and role engineering initiatives, reducing network vulnerabilities and mentoring cross-functional teams to improve collaboration and efficiency.
Security Operations Specialist
Optiv Security, Inc
11.2017 - 04.2018
- Managed CyberArk components across four major UNIX platforms for over 1,000 user accounts, improving authentication efficiency by 15% and achieving a 50% reduction in security incidents.
- Integrated CyberArk with LDAP/AD systems, diagnosing and resolving 95% of connectivity issues, enabling seamless multi-application integration with SIEM (Splunk) and ITSM.
- Enhanced identity compliance through system health assessments, producing 50 compliance reports and validating mapping for over 70 privileged accounts against access policies.
Senior Engineer
Xilinx, Inc
07.2016 - 09.2017
- Engineered and rolled out ADFS 2.0/3.0 and ADFS Proxy servers, implementing claim-based rules and federations for seamless Single Sign-On (SSO) across hybrid enterprise environments.
- Led CyberArk PAM policy creation, safe/platform management, password management, and disaster recovery testing for Windows, Linux/UNIX systems, and databases, enhancing security posture across platforms.
- Facilitated the migration of over 200 Cisco network device accounts (Riverbed, Aruba, Cisco IOS/Nexus) to CyberArk, integrating with AD and SIEM (Splunk, Sumo Logic) for centralized privileged access governance.
- Developed PowerShell scripts to automate routine tasks, certificate workflows, and reporting, significantly streamlining operations and expediting service delivery.
- Developed PowerShell scripts to automate routine tasks, certificate workflows, and reporting, thereby reducing manual workloads and accelerating service delivery.
- Managed FIM servers by overseeing attribute mappings and import/export workflows, ensuring seamless identity synchronization across systems.
Senior Systems Engineer
Colruyt
08.2014 - 07.2016
- Designed and implemented ADFS 2.0/3.0 and ADFS Proxy servers incorporating claim-based rules and federation across hybrid enterprise environments for seamless SSO capabilities.
- Configured FIM for identity and group synchronization between mainframes and Active Directory, enhancing accuracy of identity data across systems.
- Led DNS migration from Microsoft DNS to Infoblox, successfully automating record migration using PowerShell scripts to guarantee zero downtime and data integrity.
- Configured FIM to synchronize identity and group information between mainframes and Active Directory, ensuring accurate identity data across systems.
- Administered CyberArk Privileged Access Management for password oversight and Linux access control, developing SELinux policy rules to enforce least-privilege access in Linux environments.
- Customized Quest Active Roles by creating access templates and managing units, aligning web interface with organization's identity governance requirements.
Senior System Engineer
Deloitte
09.2011 - 07.2014
- Oversaw Active Directory and Group Policy in large-scale enterprise domain, managing over 300,000 objects to ensure secure access and enforce policies across global infrastructure.
- Engineered Active Directory integrations for various applications. Managed Active Directory Certificate Services (ADCS) for certificates and resolved certificate-based authentication issues.
- Engineered Active Directory integrations for applications and managed Active Directory Certificate Services (ADCS) to resolve certificate-based authentication issues, enhancing security and access management.
- Led the strategic planning and execution of decommissioning Windows Server 2003 while promoting a 2012 R2 domain controller to ensure uninterrupted operations throughout the enterprise.
- Automated application health checks and availability monitoring with PowerShell and VBScript, reducing manual workload and improving incident response times.
- Provided technical administration for VMware vSphere 4.1 virtualized environments, overseeing VMs, templates, cloning, and user access management via vCenter Server, supporting global IT operations.
Senior Infrastructure Engineer
Mphasis
06.2008 - 09.2011
- Managed Active Directory and Group Policy for a major enterprise domain containing over 200,000 objects, covering installation and decommissioning of domain controllers, replication troubleshooting, and FSMO role management within Windows Server 2000/2003 infrastructure.
- Conducted semi-annual business continuity drills and vulnerability assessments for all Windows servers, enhancing system resilience and ensuring compliance with security standards.
- Executed organization-wide security scans on desktops and servers to assess admin access and media files, delivering compliance reports to stakeholders.
- Managed incidents and service requests using Citrix Peregrine (Service Center) and Manage Now ticketing tools, consistently meeting SLA commitments through ITIL-aligned processes.
- Ensured antivirus and Windows patch compliance across all desktops and servers to maintain up-to-date systems aligned with enterprise security policies.
Education
Bachelor of Technology - Computer Science Engineering and Information Technology
Aurora Technological Research Institute
Hyderabad, Telangana, India06-2008
Skills
Microsoft Entra ID (Azure AD) expertise
Zero Trust architecture implementation
Privileged Access Management (PAM) design & implementation (CyberArk)
Identity Governance and Administration (IGA) (SailPoint, Saviynt)
Public Key Infrastructure (PKI) and certificate lifecycle management
Identity governance leadership
IAM program management
Access review governance
Segregation of duties controls
Identity security roadmap planning
IAM operating model design
Audit remediation management
Vendor management
Stakeholder communication
Risk management
ServiceNow ITSM integration
Risk register management
Change management
Accomplishments
- Achieved a 45% reduction in unauthorized access and a 50% increase in compliance through the design and implementation of Zero Trust frameworks.
- Successfully migrated over 200 Cisco network device accounts to CyberArk, enhancing centralized privileged access governance.
- Orchestrated over 200 multi-application integrations across 12 identity management projects, demonstrating strong project execution capabilities.
- Maintained SLA commitments and achieved 95% resolution of connectivity issues during critical integration projects, ensuring seamless system operations.
Certification
Certified CyberArk CDE (Certified Delivery Engineer) - Demonstrates expertise in delivering and implementing CyberArk solutions.
Awards
Achieved a 45% reduction in unauthorized access and a 50% increase in compliance through the design and implementation of Zero Trust frameworks., Successfully migrated over 200 Cisco network device accounts to CyberArk, enhancing centralized privileged access governance., Orchestrated over 200 multi-application integrations across 12 identity management projects, demonstrating strong project execution capabilities., Maintained SLA commitments and achieved 95% resolution of connectivity issues during critical integration projects, ensuring seamless system operations.
Timeline
Principal Architect
Unisys
01.2025 - Current
Group Leader | Senior CyberArk Engineer
Concentrix Daksh Services India Private Limited
06.2023 - 12.2025
Technical Lead (CyberArk)
Wipro Enterprises iPfi Limited
05.2018 - 06.2023
Security Operations Specialist
Optiv Security, Inc
11.2017 - 04.2018
Senior Engineer
Xilinx, Inc
07.2016 - 09.2017
Senior Systems Engineer
Colruyt
08.2014 - 07.2016
Senior System Engineer
Deloitte
09.2011 - 07.2014
Senior Infrastructure Engineer
Mphasis
06.2008 - 09.2011
Bachelor of Technology - Computer Science Engineering and Information Technology
Aurora Technological Research Institute