M Nazim

Sr Iam Engineer @Cambridge Associates

Arlington, VA, US

Installation and configuration of IAM (Identity access management) with as required PAM (Privileged access management) by design solution.• In-depth experience in SAML2.0, SSO, MFA, Risk Based Adaptive Authentication.• Created various reports like Role composition report, Identity Reports and Application attribute reports for IIQ.• Worked on onboarding the different applications like AD & JDBC connectors to load the Identity Cubes.• Integrated PAM MFA using RADIUS, SAML (SSO) using Azure, Syslogs over TCP/UDP/TLS and ENE for notifications.• Integrate Enterprise & SaaS applications using SAML 2.0, Oauth, SSO and MFA.• Privilege Access Management (PAM)- Design and Management - Lieberman, Beyond Trust, Manage Engine. • Installation, Configuration, Deploying, Troubleshooting of Applications for CyberArk Enterprise Password Vault version 9.7 to 10.10 and 11.x through automation process of components PVWA, CPM, PSM, PSMP, Private Ark. Worked with users to troubleshoot issues with the PSMP module.• Support and administration of Beyond Trust UVM20 Password Safe appliances• Defined and implemented PAM best practices, Blueprint stages to mature and maintain highly secured environment.• Implementation of cloud (AWS and MS Azure) security controls for IaaS, PaaS and SaaS based applications and infrastructure.• Administered and supported privileged access management (e.g, Beyond Trust Password Safe), two- factor autantication (e.g, Duo Security, Azure), and smart card (e.g, Yubikieys, Certificate etc.) technologies• Troubleshooting and resolving issues to maintain the health of the PAM servers to ensure consistent availability of system to end user.• Contributed to the improvement of CyberArk and PowerShell integration by providing feedback and suggestions to enhance security and efficiency• Automated couple of workflows using PowerShell also Involved in writing background networks using PowerShell