Bishesh Jandial

Identity and Privileged Access Management leader with 14+ years of progressive experience delivering enterprise-scale IAM and PAM programmes across global consulting environments. Proven full-lifecycle expertise across IBM Verify Identity Governance (IVIG), CyberArk PAS (Vault, PVWA, CPM, PSM, PSMP), Delinea Secret Server, Delinea Privilege Manager, and Delinea Server Suite - spanning requirements analysis, architecture design, infrastructure sizing, POC, non-production and production deployment, change management, SOP authoring, and structured handover to Operations. Complements PAM depth with 8+ years of IBM Verify Governance / ISIM experience across upgrades, SDI/TDI automation, RBAC, JML lifecycle, SoD, and access certifications.

Skilled in building PowerShell and Unix shell automation, REST API integrations, and custom connectors (including a ISIM–CyberArk SDI connector) that extend PAM capabilities and eliminate manual fulfilment across heterogeneous environments. Led 24-member cross-functional IAM teams, established a Security Operations Center from the ground up, and driven PAM maturity improvements that reduced privileged credential exposure by 90%+ and converted static shared credentials into dynamically vaulted, rotated, and monitored accounts across Windows, Unix/Linux, databases, and network devices. Strong executive communicator experienced in compliance, Zero Trust and least-privilege architecture, and engaging stakeholders through every phase of delivery.

Delivery Consultant - IAM & PAM - IBM

(2025-01)

IBM Verify Governance (ISVG) & IBM Verify Identity Governance (IVIG), IBM Verify Privilege Vault - Delinea Secret Server, IBM Verify Privilege Manager - Delinea Privilege Manager / EPM

• Defined and maintained operational documentation including SOPs, runbooks, KB articles, incident response guides, upgrade procedures, DR playbooks, operational acceptance criteria, and structured handover material.
• Serve as primary technical advisor for multiple simultaneous client environments across IBM Verify Identity and Access product lines; lead IAM implementations ensuring secure onboarding of users, applications, service accounts, and privileged accounts.
• Conducted specialized security health checks on IAM/PAM deployments and integrated systems within customer environments, ensuring configurations adhered to security best practices, principle of least privilege, and organizational policies.
• Drive automation initiatives for provisioning, monitoring, reporting, and operational evidence using PowerShell, SQL queries, REST API, and SDI/TDI, improving operational efficiency and audit readiness.
• Contribute to IAM strategy, solution design, RFP/SOW creation, estimation, delivery governance, and executive stakeholder communication.
• Mentor new engineers on troubleshooting, technical documentation, customer communication, and operational handover practices to accelerate onboarding and improve team delivery capability.
• Generated 3,000+ billable hours through high-quality delivery, earning repeat client engagements and expansion of GDC India scope.
• Led requirements analysis and capacity-sizing workshops with application owners, DBAs, network teams, infrastructure architects, and credential owners to define Secret Server deployment scope supporting 2,000+ managed accounts across multi-data-centre environments.
• Produced formal architecture blueprint covering HA topology using SQL Always-On, distributed engine placement per data centre, network segmentation, firewall flows, AD/LDAP integration, SIEM integration.
• Defined privileged credential lifecycle standards covering account discovery, onboarding, vaulting, check-out/check-in, password rotation, heartbeat, reconciliation, audit evidence.
• Suggested and implemented the client expand usage beyond basic vaulting by enabling rotation, heartbeat, SIEM alerting, session recording, and compliance dashboards as part of a broader PAM maturity roadmap.
• Managed formal change-management process for production deployment: authored Change Requests, CAB presentations, implementation plans, test evidence, rollback plans, stakeholder communications, and maintenance-window updates aligned with ITIL v4.
• Performed step upgrade of Secret Server from v11.7.x to v11.9.x across environments; coordinated pre-upgrade health checks, backups, compatibility validation, schema migrations, post-upgrade tests, and hypercare monitoring.
• Built PowerShell and Shell scripts for automated account discovery, scheduled password rotation validation, heartbeat monitoring, dependency updates.
• Remediated platform issues and credential management failures such as rotation failures, check-out failures, heartbeat errors, DE connectivity problems, permission mismatches, and service account lockouts; performed RCA and documented corrective actions.
• Authored comprehensive SOPs, runbooks, KB articles, incident response guides, upgrade procedures, DR playbooks, and operational acceptance checklists; conducted structured handover with live walkthroughs and shadowing sessions for Operations teams.
• Performed ongoing Secret Server health checks and maturity assessments, identifying configuration gaps, stale secrets, excess access, and rotation failures; produced remediation roadmaps adopted by client security committees.
• Performed end-to-end business analysis mapping endpoint privilege requirements across 8,000+ Windows (On-prem AD joined and EntraID joined) and macOS endpoints; produced formal sizing guide and architecture blueprint presented to CISO and endpoint infrastructure leadership.
• Designed application-control policy framework, just-in-time elevation workflows, least-privilege operating model, AD group structure, endpoint telemetry model, and governance process for policy exception handling.
• Mapped Privilege Manager capability to Delinea Just Enough Privilege (JEP) outcomes: controlled elevation, policy-based execution, application whitelisting/blacklisting, exception workflow, and reduction of standing local administrator rights.
• Integrated Privilege Manager with Active Directory and Splunk SIEM for centralised event correlation, privileged elevation audit logs, and compliance dashboards.
• Authored SOPs for policy lifecycle management, break-glass procedures, JEP-style elevation requests, exception approvals, RCA, troubleshooting, and escalation paths; delivered structured knowledge-transfer