Kexin Z.
Cloud IAM and PAM thoughts leader, CyberArk Guardian, CISSP
- Role
- Cloud Iam Pam Architect at Empresa Privada
- Location
- Miami Beach, FL, US
- LinkedIn followers
- 500 followers
About Kexin Z.
My latest project is to design and implement IAM/PAM on perm and AWS and Azure. My role is to manage all aspects of technical implementation.
Experience
Cloud Iam Pam Architect
Jan 2024 — Present · Philadelphia, PA, US
Develop IAM/PAM cloud transformation programs for the traditional perimeters’ security organizations• PAM program: built and designed CyberArk pCloud and EPM based on best practices and additional customized CPM plugin and PSM connectors capability; Architect the multi-phased PAM program based on CyberArk blueprint and Gartner’s 3 stages approaches toward JIT privileges and Zero Standing Privileges. Created KPI and operational model; Engineer the multi-cloud DR capability by integrating with Azure Key Vault and AWS Secrets Manager. Designed and implemented new safe permission standard allowing enterprise multiple level support of the platforms, access reduction and tightening security controls around break glass process; the new design also complementing rollout of new security controls on end users.• CIAM architect and redesign enabling cloud strategic transformation. Capture the security pattern, research law and regulation, framework from NIST and CIS, create policy, standards, and best practices. Specifically leverage tools such as Entra ID, governance, Security Center, Security Hub, Entra conditional access & MFA. CloudTrail, CloudWatch, Azure Monitor, and SIEM. Engineering the critical Azure Entra external ID capability to support external technical vendors, health care research collaborators, medical clinics and doctors. • GRC work related to HIPAA, NIST, PCI, FedRAMP for cloud, cyber liability, CCM/CSA, Azure benchmarks and Zero Trust model, CIS AWS foundations; Recommends proper risk assessments and threat modeling• CIEM engineering for Azure and AWS includes fine tunes the cloud native and cloud agnostic security tools to provide a cloud-first security strategy and unified security practice across the hybrid model.CyberArk SCA secure cloud access CIEM tool POC and implantation;Intune replaces EPM
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.