Divya Gurijala
Senior Security Engineer
Hyderabad,TG
Summary
Experienced and perceptive professional with over 7 years of expertise in IT Infrastructure Services. Specialized in Identity and Access Management, possessing functional skills in analyzing and evaluating end-user requirements, troubleshooting, and fixing process gaps. Ability to translate new ideas into practical solutions, including opportunity identification, requirements analysis, service delivery, and process documentation.
Overview
7
7
years of professional experience
2
2
Certifications
Work History
Senior Security Engineer
Providence Global Centre
1 2021 - Current
- Researching, evaluating and maintaining Authentication access and security solutions across providence in support of a strategic security plan
- Developed and implemented Endpoint privilege management across organization
- Engineered Beyond trust policies to meet Authentication security requirements of the organization
- Working on Agile methodology and Azure DevOps tool
- Working on developing a plan to deliver and engineer Privileged Access management to organization
- Working on Integration of Azure AD Application Responsible for end to end process for requirement gathering,analysis,design testing and implementation of CyberArk privilege cloud implementation in providence test and production infrastructure
- Responsible for creating the architecture diagram of the CyberArk infrastructure in Providence
- Familiar with the components such as Cyberark Vault,PVWA,PSM,PSMP,AAM-CP and CCP, CyberArk Identity, Remote access
- Mainly focused on solution designing and documentation of new test cases which enhances the feature in Providence.
- Deployed Beyond trust EPM on 50k endpoints in Providence infrastructure
- Worked on on-boarding multiple applications into CyberArk including installation and configuration of CP and CCP infrastructure
- Partnered with vendor to fix some of high priority issues in environment.
- Worked on on boarding Windows, Linux and Databases into CyberArk.
- Worked on securing and on boarding the high privileged service accounts in CyberArk with password rotation capability
- Worked on developing and implementing the out-of-the box PSM connector and web based connectors such as SQL management studio,WMware host, Palo alto pan OS etc
- Focused on bringing capabilities to onboard all types of privilege accounts into Cyberark
- Contribute and review the operational run book, HLD and LLD to have updated documentation
- Identifies opportunities and implements continuous improvements to IT Security & Risk Management program
- Work together with the stakeholder to understand the requirement and fulfill the request
- Work constantly to improve the activities in the team and drive team constantly to deliver the tasks at the right time
- Enhanced employee awareness of information security best practices through regular training sessions and workshops.
- Implemented robust security measures for protecting sensitive data and preventing unauthorized access.
Senior Associate Consultant
Infosys
06.2019 - 01.2021
- Designed and deployed intricate AD solutions, including multi-domain/forest environments and integration with other identity management systems.
- Managed upgrades and migrations with minimal disruption.
- Created detailed documentation for AD configurations, procedures, and troubleshooting steps. Prepared reports on AD performance.
- Develop and enforce security policies and configurations for AD, including advanced Group Policy settings, implementing AD security best practices, and securing privileged accounts.
- Resolved complex issues related to Active Directory replication, performance.
- Implemented solutions for high-impact problems and optimized AD performance.
- Coordinated with IT teams to ensure seamless support of AD services. Managed incident response and implemented corrective actions.
- Handled Conditional access administrator, Application administrator, User Administrator, security administrator roles on Azure in Client’s environment
- Handled configuration and implementation of Azure AD Connect, ADFS, MFA, SAAS applications.
- Performed daily health checks on the client’s environment.
Senior Engineer/Microsoft Azure Engineer
Mindtree Ltd
05.2017 - 06.2019
- Resolved end-user issues by troubleshooting and mitigating problems through remote sessions.
- Educated end-users on the features and services provided by Azure AD and Azure.
- Analyzed and addressed authentication issues and synchronization problems between on-premises systems and Azure AD using Azure AD Connect.
- Configured and troubleshot Azure AD SSO, ensuring successful integration and resolution of issues with both integrated and registered applications.
- Troubleshot and resolved device registration issues, as well as Hybrid Azure AD join and Azure AD join problems.
- Configured and managed Azure Cloud MFA, addressing and troubleshooting multifactor authentication issues.
- Configured and analyzed Conditional Access policies, optimizing access controls based on organizational needs.
- Interpreted and assessed risk events for users through Azure AD Identity Protection, enhancing security posture.
- Completed configuration and deployment of Active Directory Federation Services (ADFS), providing guidance on managing the federation server for high availability.
- Oversaw the renewal of certificates in ADFS to ensure continued security and functionality.
- Configured relying party trusts with Office 365 and third-party applications, achieving seamless SSO integration.
- Configured Extranet Lockouts and Extranet Smart Lockouts on ADFS to prevent external network-related AD account lockouts.
- Administered the Web Application Proxy (WAP) server, including the renewal of federation trusts with ADFS.
- Utilized Azure AD Connect, demonstrating knowledge of Password Hash Synchronization (PHS), Pass-through Authentication (PTA), and federation.
- Managed Organizational Units (OUs) and user objects, specifying synchronization methods to Azure AD using the on-premises AD Connect tool.
- Troubleshot device registration issues and configured workplace join to Azure AD.
- Customized ADFS pages and managed multiple federation services with a single ADFS using claims provider trusts.
- Managed claims authorization and transformation rules, ensuring accurate attribute passing to applications for user authentication.
- Converted authentication modes from PTA to federated environments and vice versa, as required.
Education
Bachelor of Technology -
TKR Institute of Technology- JNTUH
04.2001 -
Skills
Endpoint Management
Privilege Access Management
Identity and Access Management
Azure Active Directory
Active Directory
CyberArk Vault
BeyondTrust Endpoint Management
Powershell
ServiceNow
Agile Methodologies
Azure DevOps board
Incidence Response
Kanban
ITIL
Certification
CyberArk Defender
Timeline
CyberArk Defender
09-2024
AZ-104 Azure Administrator Associate
08-2019
Senior Associate Consultant
Infosys
06.2019 - 01.2021
Senior Engineer/Microsoft Azure Engineer
Mindtree Ltd
05.2017 - 06.2019
Bachelor of Technology -
TKR Institute of Technology- JNTUH
04.2001 -
Senior Security Engineer
Providence Global Centre
1 2021 - Current