Bhawana Tripathi

Active Directory/Entra ID/IAM :

• Tenant,Subscription,custom domain,VM,DNS record creation. Managing sites and services, monitoring replication,AD health-check and error control and DC diagnostic health-check, remove lingering objects. Customize Azure AD Connect directory synchronization to accommodate mutli-forest and forest consolidation scenarios. Domain controller promotion/demotion/decommission/AD Backup and metadata cleanup etc.
• User lifecycle management using System for Cross-domain Identity Management (SCIM), RBAC, conditional access, security group creation—assigned and dynamic, and setting up dynamic group membership rules.
• Privileged Identity Management (PIM) -access review-managing, monitoring and auditing access to their Azure resources, implementation of just-in-time
  (JIT) access to both Azure AD and Azure resources.
• Identity governance-Entitlement management, access package, catalog creation. Integrate Snowflake with Azure AD and create connection, Snowflake users and attribute sync. Identity protection-policy configuration- user risk, sign-in and MFA registration.
• IdPs(Identity providers) involving Okta,Sailpoint,PingFederate, OneLogin,Entra ID,Cyberark, BeyondTrust.
• Device management-Device compliance, patching, policy management.Design and deploy Active Directory forests,services-ADDS,netlogon,DFSR,kerberos etc.
• Monthly server patching through WSUS and manual patching through scripting in case of failure, troubleshooting server functionality.
• Identify and resolve AD health issues which may impact migrations.
• Deploying server performance monitoring tools such as SCOM, Netwrix Auditor,Qualys, ManageEngine, Replmon, McFee, Crowdstrike, Quest etc.
• ADCS-creating and managing certificate templates using asymmetric encryption, managing PKI architecture ( issue, CRL, IIS-certificate binding etc).
• Managing roles- ADDS,DHCP, Group Policy Management-GPO creation and server vulnerability fix. DNS- record creation-conditional forwarders etc.
• Using authentication protocols-Kerberos, LDAP, NTLM. LDAP binding,configuring LDAP queries.
• Active directory user and computers-managing user and computer accounts,access/permissions delegation, security(scope-domain local, global, universal) and distribution group creation.
• CISO Red Teaming Activities - threat control, performing cleanup. Implementing change requests post approval.
• Building Active Directory domains and Trust transitive,non-transitive,oneway,2-way trust among domains/forests. FSMO roles, AD disaster recovery-transfer or seize roles. AD time synchronization.
• Experience on consolidation / migration tools like Active Directory Migration.Quest to migrate users, groups and computer objects between forests.
• Active Directory Administrative center-fine grained password, account restore.
• ADFS-enrolling certificates and configuring SSO and claims, application integration.
• Powershell Scripting and Automation.Ivestigating frequent account lockoutsImplementing best security practices, Cyber-Security guidelines.
• Ticketing Tools : Servicenow, Salesforce Classic and Lightening, BMC Remedyforce, Ivanti, ISM etc.
• VPN tools- Cisco Anyconnect, Global Protect, RSA token etc.

Salesforce and iSupport Administrator:

• Creating and managing user accounts, roles, profiles, and permissions to ensure the right access levels.
• Managing salesforce classic and lightening console and service requests. Sandbox server management.
• Resolved failed voice procedure(making job correction based on alerts ,jobs on hold, release the job, reimport the job, maintaining patient health care information.
• Importing, exporting, and maintaining data accuracy, integrity, and security.
• Customizing Salesforce to meet business needs, including creating custom objects, fields, page layouts, and record types.
• Implementing automation tools like Process Builder. Workflow Rules, and Flow to streamline processes.
• Building and maintaining reports and dashboards for data analysis and decision-making.
• Providing training and support to users, troubleshooting issues, and serving as the main point of contact for Salesforce-related queries.
• Keeping up with Salesforce updates and best practices to ensure the platform is used effectively.
• Working with other departments to gather requirements and ensure Salesforce aligns with business goals.

ServiceNow Administrator:

• Configure, maintain, and optimize the ServiceNow platform for ITSM, ITOM, ITBM, and HR modules.
• Manage roles, groups, permissions, and security policies to control user access.
• Design and implement Workflows, Business Rules, UI Policies, and Flow Designer automation.
• Support ITSM processes by configuring incident, change, and service request workflows.
• Integrate ServiceNow with third-party tools like Active Directory, SCCM, Jira, and cloud services using REST/SOAP APIs.
• Develop custom scripts, forms, dashboards, and reports to enhance functionality.
• Perform system upgrades, patch applications, and test new features before deployment.
• Identify and resolve platform performance issues, errors, and security concerns.
• Maintain CMDB integrity, run reports, and create dashboards for analytics.
• Provide user training, create documentation, and enforce best practices.

IAM-Sailpoint Administrator:

• Administer and manage SailPoint IdentityIQ (IIQ) or IdentityNow (IDN). Maintain user accounts, roles, groups, and permissions.
• Configure and manage access policies, role-based access control (RBAC), and attribute-based access control (ABAC).Implement self-service password management and account recovery.
• Oversee user provisioning and de-provisioning (account creation, modification, and removal). Manage access request workflows and approval processes.
• Ensure proper entitlement management and role assignments. Monitor and optimize SailPoint workflows, rules, and reports.
• Enforce identity governance policies to comply with SOX, GDPR, HIPAA, ISO 27001.
• Conduct access certification campaigns and periodic user access reviews. Provide technical support and training for end-users.
• Implement Segregation of Duties (SoD) policies to prevent unauthorized access. Perform audit log reviews and compliance reporting
• Diagnose and resolve SailPoint issues related to authentication, access failures, and workflow errors.
• Work with IT, security, and HR teams to troubleshoot IAM-related problems.
• Review logs, system alerts, and error reports to identify and fix issues.
• Configure and maintain connectors for Active Directory, Azure AD, SAP, ServiceNow, AWS, and other enterprise applications.
• Work with APIs, REST, and LDAP to integrate third-party applications with SailPoint.
• Support SSO (Single Sign-On) and MFA (Multi-Factor Authentication) configurations.
• Manage SAML, OAuth, and OpenID Connect integrations.
• Perform system updates, patches, and version upgrades for SailPoint. Test and deploy SailPoint application patches and bug fixes.
• Ensure high availability and performance optimization of the SailPoint environment.

Windows System Administrator -Banking and Finance:

• Printer access, performance, health check and backend support -banking devices Scanner, Laser,Inkjet Printers,Receipt/Pagers,Cheque,Multi-Function Printers (MFPs) /passbook and cheque MICR Printers,Wide-Format,Label,Thermal,Duplex Printers.
• Manage Fax and printer access and troubleshooting issues. Monitoring Print pool services.
• Troubleshooting Monitor, laptop, desktop, Kiosks LAN and network connectivity issues.
• Handling VPN login issues, VPN Gemalto/ RSA Token installation and configuration.
• Providing VIP assistance to Privilege users with access and hardware/application support.
• Mapping applications to the roaming profile in user's workstation from the backend.
• Mapping shared drives, troubleshooting/reporting drive access errors. NT login assistance to on-shore and remote customers.
• Reporting mainframe application access and performance related issues.
• Raising Priority Incidents in case of baking network services or hardware failures based on the impact and analysis.
• Windows updates, Driver, software installation/repair and configuration, policy sync status check using local admin rights, Internet/Intranet, antivirus update and spam blocking, computer hardware,
• Bit locker login and recurring multiple login issues, troubleshooting and escalation.
• Initiating Fedex courier service bookings, tracking status, handling off-boarding hardware requests.
• Account Management, Money Transfers, Bill Payments, Budgeting Tools, Alerts and Notifications, Mobile Check Deposit, Security threats,monitoring compliance and audit reports.
• Providing support for mobile banking applications, ATMs,POS (Point of Sale) Terminals, Biometric Authentication Devices,Digital Signage,Security Cameras and Surveillance Systems, Blockchain and Cryptocurrency Wallets,AI and Chatbots,Robo-Advisors,Cash Dispensers and Recycler Machines.
• Software configuration and support : Configuring Lotus notes mail box and resolving synchronization and application errors. Webmail, outlook profile, calendar, quarantined emails, meeting/conference room booking ,Cisco IP Communicator, Webex, Zoom, skype-audio/video/settings/exchange server errors.

Banking Application support : Mortgage, Money Laundering, Passport etc,AS400,Life400,maintenance, Avaya, 360T, 365 Online – Availability, 360T, 3r/AWD, A7 Resource Booking Facility, ABS, ACBS Business Objects R2, ACBS, ACCENTURE, Access Database, Ace, ActivKey (user may refer to these as ActivCard), Admin Websites - L2B, BWFS, Algo, Alnova, Alpha, Application Super Signer, ARS Remedy, Atlantis - New Business Faxes, Authorised Signatory Numbers, AutoFax, Avenue - Saratoga, Aviator, Bank Link, Banking Online/Online Diary, BEC, BIF Ifactor, BIPS (BASEL), Blackberry, Daemon, Data Warehouse, Domino Internet password, EBQ, EFT (Electronic Funds Transfer), EJ, eLearning, Electronic Journal, EMpower, EQ Staffware Equifax, ESS (Employee Self Service), EXCHANGE, Experian, FELB, FIBOS, First Rate, FX Dublin (also called Retail Map / Retail FX), FX UK (also called Retail FX Lon / UKOPLIVE /UKOPS), FX US, General Ledger, GIA Domain, Glasses Company (Car Tax), GPP, HR2000, i, IBIS NI, Bliss , BOI DEV DOMAIN, BOISS Website, BOP, BOSS, Britnet, Broker Centre, BT Dialler (Connect), BT Mobile Express Toolkit, Business Objects (NIIB) , Business Online – BOL (CSA), Businesslink, BWHO domain, CACS / CICS / GL, CAD, CADARS, Call Credit, Call Logger, CAS, CASBBUK, CC PULSE, CCCS, CCM (Customer Contact Management), CD100 or Informs, Centre Vu, CICS, Cisco Secure ACS, CL (Commercial Lending), Clear Case, Clientel, Compass, Control D, Cosbatch, Credit Advisor, CRM (Customer Relationship Management), CTE Passwords, CTEMORT1, CustomerLink, CVC, Summit Utility( 1st Payment Letter, Funs Release Check, Mort Repayment Calculator, Soft Lock Release, XML Refresh), Super Signer, SY2, Syndtrak, Synstar, SYS_DEV_DM domain, Tandem/ Base24, Target, Target365, TOSCANA Citrix, TRAC, Tracker SMS, TRACS, Transact, TSO, TSOA, TSYS, Unix Servers, VAX, Verint, Visual Files, VME, WS48, XML refresh, YouChoose,IBIS ROI (also called BOFI / SECOFRSUPP / AS400), ICSB60, ICSDEV, Ideal, Idealive, Image Viewer , InForm, Insite (Group), Intel_d, Intellimatch, Intellistore, ISM, Land Registry, Lucent Centre Vu Call Mgmt (ACD), Lynx, Mailforms, MCA Desktop, Medoc, Message Repository (also called Cash Positions), Microstrategy, Millenium, Money Laundering CBT, Money Laundering Suspicions, MoneyPoint, Moody's, MortgageLink, Murex, My Details, Experience Core Qualifications Education Professional Affiliations Certifications Roles and Responsibilities NESS, NiComm, NT, Odyssey, Omniview, Online Diary, Optinet, Oracle8i, Page Centre, PAGES / Data Wearhouse, PALS, Performance Online, PHASE, Platform Click Decision, Pointsec, POS/AMS, PRA, Pre-advise, Premier POS, Priority Lodgment system, Ptrak, QMC, QMC Queries,Rate Card, Reflections, Remedy, Risk Factor, Safeboot, SAM/Rockall, SAP, SAP BIPS, SAP ESS (Employee Self Service), Savings, Savings Time, SDI/Clarify, SDMT, SecuritiesLink, Signature Verification, SIM/SAM/Scratch Pad, SMS, Snow White, SOC 2, Solcase, ST (Savings Time), Staffware, Staffware, Staffware/EQ, Static Model (also called Client Model / Trade Model / Discoverer / Rate Card / Summit / Traders), SUMMIT etc.

• Answering end user calls, understanding the reported issues, analyzing, troubleshooting and escalating to next level if issue persists.
• Providing 24/7 support, taking remote access, capturing screenshots and evidences and logs for investigation, ticket documentation, follow-ups with 3 strike process and performing proper team handovers.
• Assisting user and providing guidance in raising service requests based on their requirement.
• Performing software and driver installation, configuration, finding bugs, pushing system updates/reboot.
• Investigating system hangups, user frequent account lockouts, machine trust relationship error, bitlocker login related issues.
• Using local admin rights, VPN software installation, certificate configuration, RSA, Global Protect and Gemalto token enrollment etc
• Configuring internet explorer/proxy/Firewall/Wifi/LAN and DNS settings, PC cache clean up,troubleshooting browser and system slowness.
• Providing support for multiple applications such as Webex, Servicenow, Ivanti, Skype, Lync, Chrome, cisco communicator, jabber, Excel, PowerPoint, acrobat, outlook, MS office issues, vpn-certificate enrollment, cisco Anyconnect software installation and server configuration, Avaya issues, AT@T requests.
• Raising priority Incidents, Problem tickets and updating IVRs.
• Configuring SSL certificates, reporting phishing, site blocking, quarantined email, cyberattacks etc.
• Virtualization : RDP, Citrix, Vmware administration (Session monitoring and killing and account management).
• Restore accidentally deleted user files and folders
• Storage : File share creation, access, restore, mapping, access error etc.
• Microsoft Azure : User account access management, MFA, SSPR configuration and device management.
• Printer and Fax : Access, mapping, driver installation, print queue management, MICR, printer usage and performance monitoring etc.