Strategic IAM Professional delivering tailored security and compliance solutions for businesses of all sizes and scopes. Over 10 years of experience in Identity and Access Management (IAM) and Privileged Access Management (PAM), including frameworks like Vendor PAM, Role-Based Access Control, Access Recertification, and Governance & Intelligence. Hands-on expertise in IAM tools such as SailPoint IdentityNow and IIQ, ForgeRock OpenAM, CyberArk PAS, RemoteAccess, BeyondTrust, IBM Security IAM Stack, and additional tools like Delinea Secret Server and other leading PAM solutions. Proven ability to gather business requirements, engage stakeholders, and translate needs into technical and functional specifications. Skilled in designing, implementing, and integrating IAM solutions. Comprehensive understanding of business application roles and security groups, including Active Directory, HRMS systems, SAP, and payment gateways. Extensive knowledge of privileged session gateways, containerization with Docker, and virtual appliance and cloud SAAS based tool implementations. Certified CyberArk Trustee, Defender, and Sentry; ISO 27001:2013 Lead Auditor; ITIL Foundation 2011 in IT Service Management; and recent product certifications as CyberArk Certified Delivery Engineer (CDE) and Delinea Secret Server Associate. Certified in BeyondTrust Password Safe, BeyondTrust EPM for Mac and Windows, and PMUL (Privileged Management for Unix/Linux). Experienced in conducting ITGC audits, Disaster Recovery drills, and security incident management with tools like HP ArcSight. Adept at creating project proposals, scope documents, and implementation plans for IAM projects. Strong experience as a Scrum Master, delivering projects in agile environments. Excellent communicator with a proven track record of training clients and vendors on IAM tools, enhancing adoption and proficiency.
+91-8858209553, 4208100
Current Project
Company: Accenture India
Client: US Agri-Science Customer
Title: CyberArk & SailPoint Identity IQ Implementation
Role: PAM Architect
Period: May 2024 - Present
Description: Enhancing PAM solutions using CyberArk Core PAS and implementing Vendor PAM for IT and OT environments. This involves identifying gaps, defining future roadmaps, creating heat map reports, and implementing capabilities such as session isolation, access request management, and JIT (Just-In-Time) access.
Project 1
Company: Accenture India
Client: AU/NZ Banking Customer
Title: CyberArk & SailPoint Identity IQ Implementation
Role: IAM Program Manager (Technical Architect)
Period: Sept 2024 - May 2024
Description: Requirement gathering, designing CyberArk Core PAS and SailPoint IIQ, and implementation in Development and Production environments. Integrated SailPoint with SAP SuccessFactors and AD, enabled SSO, and automated RBAC access for AD and related applications.
Project 2
Company: Larsen & Toubro Infotech LTD
Client: UK-Based Insurance Company
Title: SailPoint Identity Now Implementation (JML Automation & Application Integration)
Role: IAM Architect (SME)
Period: March 2023 - Sept 2023
Description: Implemented SailPoint Identity Now for identity lifecycle management and application integration, including provisioning/de-provisioning automation and integration with ServiceNow and Azure AD for SSO.
Module: BeyondTrust PAM & EPM for Windows and MAC
Role: BeyondTrust Architect
Period: March 2023 - Sept 2023
Description: Migrated BeyondTrust Password Safe solution, integrated with multiple servers and platforms, and implemented Just-In-Time (JIT) access for critical insurance applications.
Project 3
Company: Larsen & Toubro Infotech LTD
Client: Healthcare
Title: Identity and Access Management Implementation – Green Field
Role: IAM Architect (SME)
Period: Feb 2021 - March 2023
Description: Installed and configured SailPoint IIQ, integrated with HRMS and ForgeRock for SSO. Automated user access provisioning/de-provisioning for multiple applications.
Module: BeyondTrust PAM & ForgeRock SSO
Role: BeyondTrust Architect
Period: Feb 2021 - March 2023
Description: Configured BeyondTrust virtual appliance for password management and integrated with ForgeRock for SSO, automating account onboarding and management processes.
Project 4
Company: Larsen & Toubro Infotech LTD
Client: Automobile Manufacturing Company
Title: Identity and Access Management Support and Enhancement
Role: IAM Architect (SME)
Period: Nov 2019 - Jan 2021
Description: Supported IAM operations, change requests, and SSO integration using IBM ISAM protocol, as well as CyberArk Core PAS implementation for Honda.
Project 5
Company: Deloitte Hong Kong
Client: Entertainment Company
Title: Privileged Access Management Strategy and Assessment
Role: PAM Architect (SME)
Period: March 2019 - June 2019
Description: Assessed the existing CyberArk deployment, conducted gap analysis, and developed a remediation roadmap to optimize PAM processes.
Project 6
Company: Deloitte Hong Kong
Client: Deloitte Internal Cyber Intelligence Center
Title: Privileged Access Management Managed Security Services and Technical Pre-Sales Lab
Role: CyberArk PAM Architect (SME)
Period: June 2019 - Sept 2019
Description: Deployed CyberArk PAM solutions for internal security, integrated advanced PAM functionalities, and provided real-time use-case demonstrations.
Project 7
Company: IBM India Pvt. Ltd.
Client: Brazil-Based Bank
Title: IAM and PAM Security as a Service Framework (SaaS)
Role: Lead Consultant
Period: April 2018 - Jan 2019
Description: Provided centralized user provisioning via SailPoint IIQ and privileged access management using CyberArk, integrating with HR databases and business-critical applications.
Project 8
Company: IBM India Pvt. Ltd.
Client: Telecom Company (Europe)
Title: PAM - Retail Stakeholder’s Security Framework (R-SSF)
Role: Lead Consultant
Period: Dec 2017 - April 2018
Description: Implemented PAM using IBM ISPIM, integrated with Windows AD, Unix, and network devices, and configured access management for critical servers and applications.
Project 9
Company: IBM India Pvt. Ltd.
Client: Telecom Company
Title: IAM - Retail Stakeholder’s Security Framework (R-SSF)
Role: Application Consultant
Period: Nov 2016 - Dec 2017
Description: Centralized account management and implemented privileged access management for Telecom, using ISIM for provisioning and ISPIM for secure session management.
Project 10
Company: Aujas Network Pvt. Ltd.
Client: Insurance Company
Title: IAM - Retail Stakeholder’s Security Framework (R-SSF)
Role: Application Consultant
Period: Jun 2016 - Nov 2016
Description: Implemented PIM for privileged account management for insurance company employees, integrating AD and databases with the PIM solution.
Project 11
Company: Deloitte
Client: Insurance
Title: ITGC Audit (ISMS Framework)
Role: Trainee Auditor
Period: Sep 2015 - Nov 2015
Description: Conducted internal audits to align the company's IT infrastructure with ISO27001:2013, identifying IT control gaps and preparing ITGC reports.
Project 12
Company: Deloitte
Client: Telecommunication
Title: Security Information & Event Management (SIEM Framework)
Role: Support Engineer
Period: Jan 2016 - Jun 2016
Description: Administered ArcSight ESM, configured smart connectors, and created rules for log filtering and report generation.
Project 13
Company: Deloitte
Client: Telecommunication
Title: IAM - Retail Stakeholder’s Security Framework (SSF)
Role: PIM Integration Consultant
Period: Sep 2015 - Jun 2016
Description: Centralized account management, auto-provisioning, and de-provisioning, integrating AD for employees and non-employees.
Project 14
Company: Deloitte Touché Tohmatsu India Pvt. Ltd.
Client: Insurance Company
Title: IAM - Retail Stakeholder’s Security Framework (R-SSF)
Role: Application Consultant
Period: Sept 2014 - Aug 2015
Description: Developed workflows, forms, and integration for AD-based auto provisioning and managed credentials with Privileged Identity Manager for the insurance company.