Experience

Consolidated Edison Energy, Inc.

• United States
• Utilities
• 1 - 100 Employee

• Senior PAM Consultant

  • May 2021 - Present

  • Responsible for Privileged Account Management with CyberArk PIM suite Administration with a good understanding of the underlying business processes. • Work daily with CyberArk's PVWA. CyberArk Administration and Troubleshooting. • Performed multiple CyberArk PAS upgrades, most recent to v11.4 • Configuring LDAP and RADIUS Authentication • Creating SAFE and assign user to the SAFE using REST API script and onboarding of Linux/Unix, windows, Network, Database and AWS accounts through RESTAPI Script. • Troubleshooting of CyberArk login issues and other issues related to CyberArk at the time of implementation. • Onboarded multiple different types of accounts such as Active Directory, LDAP and database (MSSQL, ODSEE) • Work on the actual EPV servers using PrivateArk to administer the Acceptance (UAT) and Production Vaults. • Performed PAM operational tasks, defining access control, user entitlements, management of Applications Credentials and User Access Policy. • Worked on Privileged Access Reviews, Compliance Reporting, Access Control Processes and other associated tasks with Privileged User Management. • Creating safes and adding users and groups to them for privileged access in CyberArk • Administration of User accounts, Group memberships, and Organizational Units using Active Directory. • Created Identity Manager Admin Tasks/Roles. Created Identity Policies to set Member/Admin Roles, Group Policies Show less



Capital One

• Egypt
• Leasing Non-residential Real Estate

• Senior CyberArk Consultant

  • Jun 2020 - Apr 2021

  • Implementation and installation of Cyber Ark 10.0 and latest implementation of Cyber-Ark 11.4 and CyberArk 11.7 • Worked on Privileged Account Management with CyberArk PIM suite Administration. • Installation and configuration of the EPV components (Central Policy Manager, Password Vault Web Access, High Availability Vault Cluster, Secure Zone Access, SAN storage, SSL certificates and Load Balancing). • Configured platforms, master policies, created Safes & On-Boarded 1000's of Privileged Accounts, connection components, transparent components, access control through AD Group Nesting's • Daily administration and maintenance of company's E-Directory • Creation of policies and reports in PVWA. • Worked on developing of PSM custom connector using web form and AutoIT • Worked on developing of CPM plugin using process and prompt file using REST API and Python script. • Administration experience of CyberArk vault with Safe creation, integration with LDAP and other authentication methods. • Integrated with Active Directory (LDAP), 2 Factor Authentication (RADIUS). • Defined, developed, and documented IDAM services including Single Sign-on, Self-Service registration, workflows, user management, management dashboard, Role Base Access Control (RBAC), Attribute Base Access Control (ABAC), resource and business layers Provisioning, credentialing, federation, and auditing. • Involved in application-to-application credential management. • Defined user account settings through Active Directory and used Active Directory to create, modify, and manage user, computers, and group account. • Experience in performing Privileged Account Management with fair understanding the underlying business processes. • Responsible for determining the target Privileged Session Management (PSM) audience. Determine what infrastructure and systems PSM will target (servers, virtual servers, database) • Performed internal configuration of PSM to the vault itself Show less



Macy's

• 1 - 100 Employee

• Senior Security Consultant

  • Feb 2018 - Jan 2020

  • Experience in DevOps Engineering mainly in automating, building, deploying, and releasing code from one environment to another environment. • Primary responsibilities include Installation and configuration of CyberArk Vault, CPM, CyberArk PVWA, AIM, OPM CyberArk PSM and PSM SSH proxy Architecture and design. • Upgrading Cyber Ark suite of products from 8.x to 9.x. (CPM, PSM, EPV, PVWA & AIM). • Worked on Privileged Account Management with CyberArk PIM suite Administration. • Built two new datacenters with Policy Servers and Sun One LDAP Servers on East Coast to reduce the network latency for Wachovia applications Migrated SAML infrastructure including SAML Policy Servers, Web and Application Servers from Windows2003 to Solaris platform. • Administration experience of CyberArk vault with Safe creation, integration with LDAP and other authentication methods. Mitigation of the risks using CyberArk. • Worked with different teams to implement single sign on using SAML 2.0, OAuth 2.0. • Coordinated with the Service providers and identity providers during the SAML Certificate upgrade and architectural changes. • On boarding applications and configuration of privileged accounts in CyberArk. • Produced policies, realms, rules, and responses to implement the single and dual factor authentication using RSA Secure ID Token based on the business requirements. • Applied Single Sign on using SAML2.0 for Federation Applications. • Resolved CyberArk issues in CPM to communicate with a host to accommodate credentials. • Prepared, arranged, and tested Splunk search strings and operational strings. Created and configured management reports and dashboards Show less



EPRS India Pvt. Ltd

• Linux Systems Engineer Consultant

  • Jun 2014 - Jan 2017

  • Installation and configuration of initial server setup. • Provided web hosting solutions and shell services. • Managed all aspects of system administration. • Meeting customer requirements and expectations. • Installation and configuration of initial server setup. • Provided web hosting solutions and shell services. • Managed all aspects of system administration. • Meeting customer requirements and expectations.