Candidate Information | Title | Security Engineer Access Management | Target Location | US-MI-Clarkston | | 20,000+ Fresh Resumes Monthly | |
|
|
| | Click here or scroll down to respond to this candidateCareer Highlights: Highly experienced architectural security engineer with global project experience, exceptional technical skills and experience in diverse technologies and operating environments.Privileged Identity Management Solution ArchitectoRFP to Sales, Discovery to Architecture / Global ImplementationsoMastery of communications and presentation skills addressing Executives to End UsersoMastery of the required documentation skills for Low to High Level Design, Implementation, & Operations GuidesxGlobal CyberArk Architecture & ImplementationsoComplex Business Continuity requirementsoSecure Hosting Environments (SHE)oUser Experience (UX) approach to Functional SolutionsRecognized Security Consultant with senior level engineering and team leadership experienceExperience leading global projects comprised of culturally diverse engineering resourcesCyberArk Shadow / Mentor RepresentativePROFESSIONAL EXPERIENCE SUMMARY:GCA, Inc 2020 -2022 Privilege Access Management (PAM) ArchitectPosition SummaryPrivileged Access Management Practice Lead spearheading the development of a PAM Team. Performed the Managed Services for five (5) Latin American based entities with stand-alone BeyondTrust Password Safe implementations.SecureITsource, Inc. Jan 2019 2020Position SummarySenior Consultant, Privileged Access ManagementCyberArk SME for global privileged access deploymentStrategy, scope, and deployment analysis including CyberArk Component selectionDevelopment of CyberArk Architecture & Interdependency system design, Deployment & ImplementationWork collaboratively with client representatives for Explore & Discovery and leading customer design reviews focusing on load requirements, user experience (UE) and User Acceptance (UA)Perform complete deployment, implementation, testing, user acceptance testing, transition to production & operationalizing the environment, including managing daily administration tasks, trouble-shooting, and on / off boarding request processesProvide knowledge transfer and conduct training to clients permanent staffDXC Technology (EDS, HP, HPES & CSC Merger) 1994 PresentPosition Summary for EDS/HP/HPE/DXC:February 2015 Present Security Advisory Services IAM PracticeFebruary 2012 2015 ESS-IAM Senior IAM ConsultantFebruary 2011 February 2012 Architect IAM & SSOJanuary 2010 February 2011 Security Tower Lead (Fortune 500 client)October 2008 January 2010 Lead Security Engineer ID Expedite (IAM)*October 2007 October 2008 Integrated Lab managementOctober 2006 October 2007 Engineer Perimeter Access ControlApril 2003 October 2006 Lead Engineer IDM Access ControlJune 2001 April 2003 Security Engineer Dow Mergers & AcquisitionsApril 1996 June 2001 Microsoft Engineering GroupFebruary 1994 April 1996 TPD Client Server Sales & MarketingPosition details:FEBRUARY 2012 2018Enterprise Security Services (ESS) IAMImplementation of CyberArk for a Global Automotive Financial Corporation including Business Continuity and DiImplementation of CyberArk Privileged Identity Management and Privileged Session Monitoring for Public Sector Financial entity. Design and deployment for Disaster Recovery and Backup and Restoration procedures.Provided the Architectural Consulting for HP Clients to have the HP Portal / Enterprise Service Portal (ESP) Single Sign-On. Provided Architectural assessments of client environments and Identity Provider (IdP) configuration readiness. Managed the rollout and implementation of the rollout, organized the testing and rollout phases.Implemented performed an upgrade of CA IdentityManager and JBoss, enhancements to CA IdentityManager and added custom endpoints and PowerShell scripting for data normalization.FEBRUARY 2010 2012Architect Identity & Access ManagementStarted on the project at the end of the Design Phase through completion:GE-QMS DocumentationTraining collateral for Levels 1 thru 3Purchase requisition processesTroubleshooting network & firewall problemsLed the certificate: request, answer, installation & configuration processLead the offshore team through the Design & Build Phases Work Product Review processes and received approvals. Performed as lead engineer for the customer on-boarding process and completed the first customer successfully.Architected Phase II Connectors for:oSAP; SAP / UME; Oracle Database; Custom Application ConnectorArchitecting the Access Management and Single Sign On infrastructure for HP hosted web applications.JANUARY 2010 FEBRUARY 2011Security Tower Lead for Fortune 500 CompanyLeadership focus successfully transitioning the IdM / AM security tower on time with a bump less transfer under extremely inhospitable conditions: Led the interviewing, recruitment, hiring, and training for the local and Best Shore teams for all HP Processes, procedures, and applications for the operations environment. Continued past transition to effectuate Steady State and update the current architecture for effecting High Availability and Fail Over and achieved:Reduced user based incidents by 80%Reduced Severity 0 &1 incidents from 5-8 per week to 0-1 per monthIncreased performanceReduced response timesImproved processes for Change Control, Problem Management, root cause analysis and DocumentationImproved Client reportingOCTOBER 2008 JANUARY 2010Lead Security Engineer ID Expedite (IAM)Leadership oversight and management in the design and development of an Identity Management capability utilizing Oracle Identity Manager: Designed and built the eLab environments of: Pre-Development, Development, and UAT. Performed and demonstrated to clients User Self Registration and Workflows of Approvals and Escalations. Wrote the Deployment Guide for production release and deploy. Created and developed training collateral for:Users; Managers; Engineering; DeploymentMentored and Trained the Best Shore teams in the expansion and maintenance of the eLab and Deployment of ID Expedite up to and through:Front-end load balanced web serversoClient security; Certificates and storesWebLogic ServersoDomain creation; Clustering and failover; Certificates and Key StoresOIM ApplicationsoClustering; Certificates and Key Stores; Oracle Database; Schema Deployment;OCTOBER 2007 OCTOBER 2008Integrated Lab ManagementOnboarding Consultant for Security Capability Engineers and Onboarding Engineers: Instrumental role in the development of Security Roles and Groups for secure remote access into ILab and promotion to production. Created training collateral for Best Shore teams and performed the actual training.Engineer Perimeter Access ControlCreated access policies securing access by:Originating network locationAnonymous, single, and two factor authenticationTarget network locationsApplication controlsTesting & Remediation of deliverables in both development and iLabProduction delivery oversight and technical supportDocumentation & Training guides, manuals, and training presentations for multiple audiences from end users to executive managementAPRIL 2003 OCTOBER 2006Lead Engineer IDM Access ControlGlobal Information Security Organization Team Leader: Provided high-level technical security expertise for the development of security offerings and capabilities. Created security controls that involving the development of custom applications to implement principles of Least Privilege and Separation of Duties to Microsoft Windows Application Servers, which were previously not available and have been submitted for the patent process.Technical team leader managing a team of four (4) UNIX engineers directing efforts to meet scope and delivery dates and led the CTO processesTesting & Remediation of deliverables in both development and iLabDocumentation & Training guides and manuals specific to the CapabilityJUNE 2001 APRIL 2003Security Engineer Dow Mergers & AcquisitionsCreate secure infrastructure between Joint Ventures and Mergers and AcquisitionsLead engineer providing direction for (10) subject matter engineers for the provision rapid deployment of critical workstation services to the Joint Ventures and Merger & Acquisitions utilizing Windows NT4.0 / 2000 and Exchange 5.0 / 2000Developed engineering designs according to scope and strict security parameters that included outdated and despaired hardware and software platforms across Korea, China, and Middle East.Testing of the security and access controls, performance and uptime requirementsDocumentation of all network infrastructure and server fabricAPRIL 1996 JUNE 2001Microsoft Engineering GroupPrimary responsibilities included the design, documentation, and deployment of both Microsoft and non-Microsoft solutions including:Active DirectoryExchange MessagingInternet Information ServerEnterprise backup using CA and SymantecAntivirus using Trend and CACreated numerous Design Proposal Summaries for installing or upgrading Microsoft solutions for existing clients reflecting required changes or enhancements to their complex environments.Testing & Remediation of deliverables in development LabProduction delivery and technical supportoDocumentation & Training guides, manuals, and training presentations for; End users, Engineering, Architecture, Managed Life Cycle, Sales & Portfolio, Executive managementFEBRUARY 1994 APRIL 1996TPD Client Server Sales & MarketingSystem Engineer supporting pre-sales initiatives, determining requirements and matching to services with customer requirements. Primary responsibility was a technical consultant to TPD sales and marketing sales executives to design, quote, present and close new business opportunities by:Answering the RFP / RFQ technical requirementsoSpecify hardware and softwareoDetermining FTE time requirementsMeeting with client technical leadership, including architectural, engineering, and CIOPresentation SupportDevelop relationships with the client to grow the business by:oProposing new technologiesoIdentifying areas for improvement or cost savingsoExpanding interdepartmental relationships outside EDS contractual boundariesProvide technical design and leadership during development / delivery phasesLiaison between client and sales executives during contract period |