SUMMARY:

• 15+ years of experience in IT Infrastructure and Information Security Management. Worked in project phases starting from RFP\RFI, Requirement gathering, analyzing, due diligence, high & detail Level design, Implementation, migration and on - going BAU support.
• Worked on Hardware and Software Appliances such as
• Hardware Security Module (Safenet Luna S6, Thales HSM),
• Database, File System Encryption & Data Access Controls (Thales Vormetric TDE)
• Advanced Threat Protection (FireEye),
• Intrusion prevention System (SourceFire IPS),
• Web Application Firewall (Imperva SecureSphere),
• Multi-Factor Authentication (RSA Secure-Id).
• Worked on various Infrastructure Security Solutions such as
• EndPoint Protection Solution (Symantec Endpoint Security, TrendMicro Deep Security Manager),
• Advanced Threat Protection (Symantec ATP, Windows Defender ATP),
• Public Key Infrastructure, Life Cycle Management (ADCS, Venafi Trust Protection Platform),
• Data Encryption (PGP, Vormetric Transparent Data Encryption),
• Vulnerability Assessment (Rapid 7 Nexpose, Qualysguard)For above technologies and products, have experience in designing, creating high level and low level design documents for client signoff, Implementing the solution and supporting the solution, product.
• Experience in working on Financial, Retail and Insurance Domains
• Experience in product design and implementation
• Experience in working with multiple vendors and with geographically distributed teams

PROFESSIONAL EXPERIENCE:

Confidential

Responsibilities:

• Solution Design for Hardware Security Module
• Planning, participating for Key Ceremony to onboard the secrets to HSM
• Design, Implement Active Directory Services
• Integration of Authority with HSMs, Venafi Trust Protection Platformand Key Life Cycle Management and Key Life Cycle Management using Venafi TPP
• Participate in design discussions to enable new integrations with vendors, external stakeholders
• Enable automation for various platforms for life cycle management
• Integrate devices like Firewall, Load balancer, Webseal, Datapower, Apache, Application Servers with Venafi TPP to enable automation which enables installing the renewed certs on target system with minimal admin and user’s intervention.
• Follow ITIL processes for Change and Incident Management
• Address Service Requests raised for new issuance of, renewal, revocation
• Administration and Maintenance of Venafi TPP
• Integration of Authorities with Venafi TPP as per business requirement
• Generate monthly, weekly, adhoc reports for Key Performance Initiatives, SLA reports
• Participate, present weekly and monthly updates to Senior Leadership team
• Data Encryption (File System Encryption using Vormetric Transparent Data Encryption)
• Enable File System encryption using Vormetric TDE
• Engage with stakeholders to validate if data qualifies for encryption, understand requirement to enable granular level access controls on data
• Onboard domain, build required rules to allow authorized processes, resources, users to be able to access the data
• Create guardpoint, enable dataXform policy, generate regular weekly reports for publishing guardpoint status
• Manage and Maintain Thales Data Security Manager - Vormetric TDE
• Built new Data Security Manager, migrated all the VTE agents to new DSMs, ensured encryption policies are intact
• Perform monthly compatible checks for agent vs OS release, plan and upgrade agents on client servers accordingly.

Confidential

Responsibilities:

• Conducted assessment of leading WAF solutions in market and provided a comparison of features offered by leading WAF vendors.
• Validated top 3 WAF solutions and demonstrated features to select one product
• Conducted POC for the selected product, migrated 2 test applications and provided walkthrough of the WAF Solution
• Developed Design, Build and Standard Operating Procedure Documents
• All the submitted documents had the walkthrough for review and got the acceptance and approval sign off from the customer
• Planned the migration of 350 websites in 3 phases. Each phase had set of Staging and Production list of websites with combination of multiple web application stacks in use
• Migrated the applications in phases and continued monitoring them using Imperva WAF solution
• Integrated WAF solution with OKTA for 2FA and ELK SIEM solution for log management
• Provided handover to BAU team, trained the team to handle the BAU operations
• Configured reporting for top violations

Confidential

Responsibilities:

• Performed enhancements such as, upgrading Symantec Endpoint Protection solution from versions 12.1 to 12.9 and then later to version 14.2
• Migrated the Symantec Endpoint Protection Solution from On-Premise Datacenter to Microsoft Azure Cloud environment.
• Ensure all the Policies, endpoints, exclusions are restored on the migrated version
• Performed minor enhancements, monitored and supported tools including
• FireEye ATP,
• RSA Netwitness,
• RSA SecureId,
• Symantec Endpoint Protection,
• Symantec VIP 2FA,
• SourceFire IPS,
• Symantec MSS

Confidential

Responsibilities:

• and Key Lifecycle Management using Venafi TPP, Active Directory Services
• Performed encryption on file systems that contained sensitive\personally identifiable information using Vormetric Transparent Data Encryption solution

Confidential

Responsibilities:

• High & Detail Level design and Implementation of Trend Micro Deep Security Manager, Nexpose Scanner,
• Participated in HSM configurations,
• Integrated Project with Quest for AD authentication,
• Generating internal CA (& External) signed s and helping teams with secured protocol configurations using s.
• Worked as onsite coordinator for Security track which involves IDAM and Governance tracks apart from Infra/Data Security.
• Conduct catchup calls with internal teams, provide weekly status updates to client

Confidential

Responsibilities:

• Analyze Applications, interfaces and define patterns based on source and destination technologies.
• Prepare solution documents which details the configuration changes at both server and client end.
• Completed POC to enable SSL/TLS for end-to-end encryption between Application hosted on PlayFrameWork to IBM DB2
• Have prepared 35 reusable solution documents which helps the client to configure their applications to communicate securely with the respective Applications and databases. The technologies included various applications and databases which included PlayFramework, IIS, Websphere, Tomcat, IBM DB2, MS SQL, Teradata.

Confidential

Responsibilities:

• Design and Implementation of SIEM Solution - Novell Sentinel
• Requirement gathering from the Customer/Client
• Provided High and Detailed Level Design of the Product and the integration with various products
• Configured Correlation Rules based on the Customer requirement
• Configured daily/weekly and monthly reports based on the customer requirement

Confidential

Responsibilities:

• Ensure the Compliance of Patch, Password, Service Packs, CUs in IS Infra.
• Ensure proper Hardening of Servers and monitor the configurations through regular periodic audits and track closures of Non-Conformances.
• Schedule and conduct monthly audits to ensure servers, VMs and network devices are compliant as per the security guidelines.
• Perform security architecture review and coordinate with ISG for Architecture approvals for any hosting, rollouts or enhancements.
• Automated the server audits using Desired Configuration Manager, SCCM.
• Patch deployment, missing patches and compliance monitoring using DCM.
• Create Awareness on Security Procedures by conducting regular sessions and circulating awareness emails within EPM.
• Circulate weekly updates on Security Parameters to the Leads.
• Generate monthly reports on Security Parameters for Enterprise reporting.
• Conduct regular DR Drills to ensure Disaster Recovery Plan is in place.

Confidential

Responsibilities:

• Vulnerability Scanning/Analysis: Responsible for reporting the latest vulnerabilities, analyzing and providing recommendations for patching.
• Event analysis: Responsible for monitoring, analyzing and reporting the security events from devices like Firewalls, IDS/IPS, servers, database from RSA Envision & Event Explorer and alerting on critical events.
• Log Analysis on Daily and weekly basis and discussing about the failed login attempts and Attacks on Daily and Weekly Conference calls.
• Installing and configuring RSA Envision Explorer to receive logs from different devices. Upgrading RSA Envision from old versions to latest versions
• Windows Active Directory users and computer management, Novell Administration, Active directory Administration and implementing various requirements and access related issues through group policy and patching on servers.
• Administration & Troubleshooting of Secure ID (RSA Tokens)