Yuvaraj Natarajan

Working closely with the client as a BeyondTrust Administrator and managing the PasswordSafe, Privileged Remote Access, EPM-Windows, and EPM-Mac components.

PasswordSafe:

• Configured the Directory Queries, Address Groups, Smart Rules, Access Policies, API Registrations, User Groups, Connectors, Functional Accounts, Scheduled SCANs, Ad-hoc SCANs, and Password Policies at the PasswordSafe Cloud environment.
• Worked on discovering and onboarding the Windows, Linux, DMZ, RPA, and lab servers to the PasswordSafe Cloud.
  Worked on discovering and onboarding the local accounts on these Windows, Linux, DMZ, RPA, and Lab servers to the PasswordSafe Cloud.
• Implemented the Blue Prism application integration with PasswordSafe for both the AD and local accounts.
• Configured the API integration to the Privileged Remote Access component for credential injections to the PRA jump sessions.
• Implemented the PasswordCache component, which will be used during disaster solutions.

Endpoint Privileged Management for Windows and Mac endpoints:

• Worked on creating the computer groups, policies, and management rules for managing the endpoints at PMC.
• Updating the policies for both Mac and Windows based on the requirements and pushing the latest revision of client & adapter to the computer groups from Pre-Pilot, Pilot, and PRD groups.
• Troubleshooting user issues by using the Analytics tab and the events based on the user, computer, and applications, etc.

Privileged Remote Access and Remote Support:

• Worked on deploying the clustered Jumpoints for each data center location and made workgroup connection settings to enable the Jump session by using the same DC Jumpoints.

Configured the ECM clients on the ECM servers and PasswordSafe plug-ins, and established a connection to PasswordSafe for credential injections.

• Worked on configuring the Group Policies, Session Policies, Jump Groups, Jump Item Roles, Jump Items, Security Providers, and Security settings for managing the PRA access to different sets of teams in the project environment.

• Generated a different set of reports, such as Session, Summary, Session Forensics, Jump Item, and Syslog, based on the requirements.

• Worked on Implementing Application Identity Manager (AIM) for Application servers.
• Working with Clients to understand their Application and identifying the accounts in scope of PAM.
• Creating safes based on the identified accounts and client's requirement. Onboarding the identified accounts into CyberArk and managing passwords.
• Working with application owners to understand the scope of Application. Implementing AIM(CC, CCP, ASCP) in the application servers depending on the nature of the password stored in the server.
• Scheduling meetings and working with the Application team, Database team, and Networking team to ensure all the applications are successfully integrated with CyberArk, and the password rotation is done at regular intervals by the AIM agent installed on the application server.
• Creating and Updating of SOP's.
• Guiding application owners to install AIM agent when required

• Providing support for the Cyber-Ark services, supporting PSM, CPM, PVWA, VAULT, DRVAULT
• Windows and Unix onboarding, modifying and off-boarding
• Creating safes and Managing safes, Platforms and owners
• Providing support to end user's issues like password issues authentication issues, suspended issues and connector issues
• Monitoring application, system admin task events collected from agent deployed group's using Privileged Management Inbox
• Creation of a trusted, advanced block policy based on events in order to elevate tasks/applications by CyberArk.
• Maintaining server alerts and troubleshooting server issue Working on Group Policy and User Policy in PAM.

• Working as a team of CyberArk for Privileged Identity & Access Management
• Creating and Managing Safes, platforms and Owners, Reconciliation account
• Bulk Onboarding of accounts using Password Upload Utility
• Have knowledge on components like EPV, PVWA, PSM, PSMP, OPM, AIM
• Implemented and supported privilege management and application control by CyberArk EPM on client machines.
• Monitoring application, system admin task events collected from agent deployed.
• Creation of Trusted, advanced, block policy based on events in order to elevate task/ application by CyberArk
• Prevent the execution of unauthorized applications Agent Deployment, Upgradation, Troubleshooting.