Amal V Nath

Identity and Access Management Engineer with over 8 years of experience in Microsoft Active Directory, Exchange Server, Entra ID, and Microsoft 365 services. Proven expertise in providing critical L2 and L3 support, troubleshooting and resolving complex issues related to authentication, messaging, and identity management for large-scale enterprise environments. Proficient in automating routine tasks and developing strategic solutions to enhance system efficiency and security.

Key strengths include: Hands-on Problem Solving: Resolving complex issues and performing root cause analysis for P1/P2 incidents to minimize downtime.

Automation & Efficiency: Creating and implementing PowerShell and Microsoft Graph-based scripts to streamline administrative tasks like user and mailbox management.

Security Implementation: Configuring and maintaining security policies, including Conditional Access and Zero Trust principles, to protect enterprise data and systems

Managed Security Services Specialist - Accenture - Chennai, India

(2025-11)

• Implemented Enterprise-Level CyberArk Solution including deployment and configuration of Vault Server, PVWA, CPM, and PSM to secure and manage privileged accounts across the organization.
• Designed and tested CyberArk DR setup, including failover and fallback functionality, ensuring high availability and business continuity.
• Created High-Level Design (HLD) and Low-Level Design (LLD) documentation to support phased implementation and effective knowledge transfer.
• Integrated CyberArk with Active Directory (LDAP) and designed Group Policy Objects (GPOs) to align with enterprise security architecture.
• Onboarded privileged accounts across multiple platforms, defined policies, and performed post-deployment troubleshooting to ensure seamless operations.

IT Analyst - Tata Consultancy

(2024-01 - 2025-11)

Act as the primary contact for Identity and Access Management, implementing or amending policies that align with the Zero Trust concept.

• Offered L2 and L3 support for AD, Entra ID, and M365-related issues and automated basic tasks like user creation/deletion/modification, shared mailbox creation/deletion/modification, and DL creation/deletion/modification.
• Deployed Single Sign-On (SSO), Multi-Factor Authentication (MFA), through SAML, OAuth, and OpenID.
• Administered Azure AD Connect sync, troubleshooting replication problems.
• Implemented organization-wide Conditional Access policies (MFA, Geo Location blocking, etc.).
• Developed and implemented Group Policies (GPOs), security baselines, and access controls according to various security standards.
• Administered DNS and DHCP servers.
• Managed Identity Governance, including privileged user entitlement

Lead Process Engineer - Bosch Global Software

(2021-06 - 2023-08)

• Administered Exchange Online, including mail flow rules, SMTP integration, Send/Receive Connector configuration, and SSL Certificate renewal.
• Utilized Microsoft Purview for organization-wide Data Retention policy configuration and tools like eDiscovery and content search for fulfilling DSAR requests.
• SharePoint User access provisioning and handling basic service requests like Data restore, deleted site restore, site level security settings, etc.
• Developed PowerShell and Microsoft Graph-based scripting to optimize data gathering for presentations.
• Provided Tier 3 support for Outlook clients and MFA-enabled access.
• Fixed business-critical mail flow problems such as queues, NDRs, and connector failures.

System Engineer - Bhima Jewels

(2016-07 - 2016-08)

• Controlled 50+ Windows Servers (Active Directory, DNS, DHCP) with 99.9% uptime for 1000+ users.
• M365 Migration - Migrated 500+ mailboxes to Exchange Online with no downtime.
• Installed Veritas NetBackup, managed backup job creation, day-to-day monitoring, and ensured data backup and redundant.
• Configured FortiGate Firewall policies for LAN users, Guest WiFi users, and on-demand whitelisting of websites based on user requirements.
• Managed Hyper-V server, VM creation, and decommissioning.
• Led new store installations - sourced hardware, set up network equipment, and coordinated with vendors.
• Implemented automated patch management (WSUS) and AD GPO.

Technical Support Engineer - Inspirisys Solutions

(2016-08 - 2016-08)

• Remote IT user support, troubleshoot, and solve AD user login issues, Outlook, and other business application support.
• Kaspersky Antivirus server administration: Update antivirus application on end-user machines via policy.
• Removable storage encryption configuration via policy.
• Business application whitelisting via server-level policy.
• DLP policy configuration for preventing enterprise data leakage.
• Active Directory: User ID, group, distribution list, shared mailbox, contact creation, or deletion.
• Group policy creation and troubleshooting GPO-related issues.

B.Tech / B.E. - Kerala University