Sadia Amir Qureshi

An Information Technology / Security professional CyberArk Sentry Certified with over 10 years' experience in information security, identity & access management/IAM, privilege access management, Technology risk, risk management, project management, data security and operations. Well-versed using leading industry Identity and Access Management (IAM) solutions and privilege access management such as SailPoint, CyberArk, Beyond Trust & Azure. Ability to manage multiple and complex projects at the same time.

IAM / CyberArk Consultant - Kyndryl Canada

(2025-01 - 2026-03)

• Planning, designing, implementing, testing, and supporting IAM systems and solutions.
• Managed the workflow within IAM including access provisioning, compliance, access management (including privileged accounts).
• Evaluated, developed and implemented secure IAM solutions, based on approved enterprise security architectures.
• Experienced in IAM/PAM tools with deployment, configuration, integration and troubleshooting CyberArk Privileged Account Security product suite - Enterprise Password Vault, Password Vault Web Access, Central Policy Manager, Privileged Session Manager, Application Identity Manager.
• Installed Privileged Cloud Connector (PCC) for CyberArk component servers to connect to Vault.
• Hands-On experience in integrating and troubleshooting platforms with CyberArk Privileged Account Security such as Windows, Databases, Unix & Azure.
• Safe creation and accounts on boarding from different platforms.
• Develop and implement a strategy to identify and track service account owners.
• Communicate regularly with stakeholders to ensure awareness and compliance with password rotation policies.
• Document all processes, changes, and exceptions clearly and accurately.
• Troubleshot and resolved PAM-related incidents including credential failures, access issues, plugin errors, and session connectivity problems.
• Created PSM web connectors for web applications.
• Designed and implemented PSM connection components/plugins to enable secure privileged access to Windows, Unix/Linux, databases, and web applications via controlled session brokering.
• Developed and customized PSM connectors for web-based applications, enabling secure access to systems protected by SSO/MFA solutions (e.g., Microsoft Entra ID,).
• Engineered PSM Web Connectors for custom URLs (e.g., admin portals, cloud consoles), handling multi-step authentication flows and dynamic page elements.
• Worked on custom CPM plugins while edited process and prompt.ini files.
• Maintained and continuously improved application and PAM support documentation, including onboarding runbooks, operational procedures, and troubleshooting guides.
• Performed security software upgrades and patching across enterprise PAM environments in alignment with vendor best practices and change-control procedures for CyberArk.
• Troubleshoot issues with automatic password rotations and manual password rotations.
• Resolved password rotation issues for service accounts including dependencies (windows services, schedule tasks, application pools) using CPM logs and debug logs.

PAM/Cyberark Engineer - IGM Financial

(2024-01 - 2024-09)

• Hands-on experience in designing, implementing, and troubleshooting CyberArk Privilege Cloud (CPC) PAM solutions.
• Lead the implementation and deployment of CyberArk Privilege Cloud solutions across the organization.
• Hands-on experience in infrastructure design, implementation, documentation, and testing, with an ability to lead and mentor teams.
• Coordinated with cross-functional teams to evaluate new PAM before enterprise adoption.
• Monitored and analyzed privileged account activities using CyberArk Privilege Cloud, identifying and responding to potential security incidents.
• Deployed CyberArk privilege Cloud solution on Cloud platforms such as Azure and GCP.
• Collaborated with application teams, security, and infrastructure stakeholders to support secure privileged access and automation initiatives.
• Integration of LDAP (Active Directory) for user authentication and group to safe permission management.
• Hands-On experience in integrating and troubleshooting platforms with CyberArk Privileged Account Security such as Windows, Databases, Unix & Azure.
• Worked on CyberArk Plugin Generator Utility (PGU) for creating CPM & PSM web connectors.
• Developed PSM web connectors and successfully tested in DEV & PROD environments.
• Performed security software upgrades and patching across enterprise PAM environments in alignment with vendor best practices and change-control procedures for CyberArk.
• Designed and implemented PSM connection components/plugins to enable secure privileged access to Windows, Unix/Linux, databases, and web applications via controlled session brokering.
• Troubleshot session failures (e.g., PSM error codes, connection manager issues, network latency, credential injection failures), improving session success rates and user experience.
• Resolved password rotation issues for service accounts including dependencies (windows services, schedule tasks, application pools) using CPM logs and debug logs.
• Worked on CPM related issues including unmanaged accounts.
• Integrated the IAM solutions with SIEM solutions to log and monitor security exceptions.
• Created user guide and run book and method of procedures for new environments.

Security Analyst - Manulife Canada

(2021-07 - 2023-12)

• Managed the workflow within IAM including access provisioning, compliance, access management (including privileged accounts).
• Administration of cyberark i.e onboarding accounts manually and bulk upload.
• Designed and configured safe and group relationships for CyberArk for account ownership, access control, and password management in a multi-domain environment.
• Used automated scripts for creating bulk safes and accounts on-boarding.
• Safe creation and accounts on boarding from different platforms.
• Gathered, analyzed, and documented compliance requirements by collaborating with stakeholders, group owners, and technical teams.
• Performed day to day security administration processes, including adding, changing and terminating user accounts.
• Assisted with privileged access requests and coordinated approvals in accordance with Privileged Access Management (PAM) policies.
• Generated and analyzed users 'account reports using Microsoft Excel, including PivotTables compliance activities.
• Analyzed user access data using Microsoft Excel (PivotTables, filters) to identify discrepancies and support remediation activities.
• Reviewed and remediated dormant user accounts, ensuring compliance with organizational security policies and audit requirements.
• Updated and maintained access documentation, inventory spreadsheets, and audit evidence throughout the clean-up project.
• Led the discovery and assessment of privileged accounts to determine migration eligibility for CyberArk onboarding or remediation.
• Identified privileged accounts actively in use and coordinated their migration into CyberArk for centralized credential management and password rotation.
• Reviewed inactive, obsolete, and orphaned privileged accounts and worked with application owners to remediate or decommission unnecessary accounts.
• Validated privileged account ownership, business justification, and usage before onboarding accounts into CyberArk.
• Collaborated with application owners, infrastructure teams, and security stakeholders to verify account usage and remediation decisions.
• Tracked privileged account migration status, remediation activities, and project milestones using Microsoft Excel and project tracking tools.
• Ensured privileged accounts were onboarded to CyberArk in accordance with organizational security standards and least-privilege principles.
• Conducted access reviews to identify redundant or excessive privileged access and recommended remediation actions.
• Maintained accurate documentation of account ownership, migration status, approvals, and remediation activities to support audit and compliance requirements.
• Supported compliance initiatives by ensuring all active privileged accounts were managed through CyberArk while unused accounts were remediated in accordance with security policies.

Security Administrator - IBM

(2017-04 - 2021-07)

• Safe creation and accounts on boarding from different platforms. Troubleshoot managed and unmanaged accounts. Accounts on board and reporting.
• Bulk upload onboarding using PowerShell script.
• Monitor security logs and attempted access violations and ensure that appropriate follow-up actions are taken.
• Provide implementation and testing support for new or revised security systems and software.
• Created AD users and groups for safe delegation and updates.
• Manage day-to-day operations of CyberArk solutions including adding and deleting accounts.
• Troubleshooting Central Policy Manager (CPM) issues related to end-point issues, and other factors blocking successful password management.
• Coordinated with CyberArk support teams for escalation and resolution issues.
• Monitoring logs, analyzing logs and Troubleshooting issues with the server and the environment.
• Work with data/systems owners to improve access request practices and identify opportunities for automating processes.
• Performed daily AD administration