Haritha K S

Active Directory and SAP Security GRC Professional with 5 years of experience managing and supporting enterprise environments supporting 10,000+ users, specializing in Active Directory Domain Services (AD DS), Group Policy, Domain Controller operations, DNS, IAM. Experienced in SAP Security and GRC, including user administration, role and authorization management, access controls, SoD analysis, and risk remediation. Hands-on experience with Azure AD (EntraID), PowerShell automation, security troubleshooting, incident resolution, and L3 escalation support.

ACTIVE DIRECTORY ENGINEER | MS ENTRA ID | IAM | SAP SECURITY / GRC at TATA CONSULTANCY SERVICES (2021-06 – Present)

• Strong hands-on experience in Active Directory Domain Services (AD DS) management, including the configuration, monitoring, and troubleshooting of domain controllers, user authentication, user management and group management.
• Proficient in Active Directory replication monitoring, identifying and troubleshooting replication issues. Hands-on experience in Domain Controller deployment, ongoing maintenance, and DC demotion ensuring proper replication, SYSVOL health, and Sites & Services configuration for high availability and optimal authentication performance.
• Strong experience in creating, configuring, and managing Group Policy Objects (GPOs) to enforce security settings and administrative policies across the Active Directory environment.
• Proficient in managing Access Control Lists (ACLs) and NTFS permissions to ensure proper resource access and security.
• Proficient in managing FSMO roles, including assignment, transfer, and troubleshooting to ensure AD functionality and replication consistency and Hands-on in Organizational Unit (OU) structure design and management to optimize Active Directory hierarchy and security policies.
• Proficient in PowerShell scripting to automate routine AD tasks, such as account cleanup, improving operational efficiency and reducing manual intervention and successfully automated the cleanup of unused AD accounts, enhancing environment security and resource management.

Utilized

PowerShell and Active Directory AD Module to automate the creation, management, and assignment of gMSA to services.

• Created and maintained documentation(SOPs, KBs) for AD operational processes, troubleshooting steps, and best practices to ensure consistency and conducted regular knowledge transfer sessions with team members and served as a valuable resource for team members.
• Delivered training to end-users on best practices for using AD services and troubleshooting common user-related issues. Delivered weekly team performance presentations to clients, showcasing key metrics and progress.
• Actively collaborated with and conducted cross-training sessions for other teams on AD-related concepts.
• Expertise in developing and implementing Disaster Recovery (DR) strategies and plans to ensure business continuity.
• Skilled in managing and troubleshooting Kerberos and NTLM authentication in Active Directory, ensuring secure authentication and resolving issues and skilled in managing SPNs, NTLM policies.
• Provided excellent customer service through effective communication and problem-solving, resolving technical issues efficiently.
• Experienced in analyzing system logs and event data, with hands-on experience using SIEM tools like NewRelic, Sumo Logic and IBM QRadar for log analysis.
• Proficient in configuring Azure AD Connect for hybrid identity synchronization between on-premises AD and Azure AD and expertise in managing Azure AD users, groups, and roles for role-based access control (RBAC), ensuring secure and efficient user provisioning and deprovisioning.
• Implemented Conditional Access policies and Multi-Factor Authentication (MFA) to enhance security and ensure compliance with organizational security standards.
• Act as an L2/L3 escalation point for identity and messaging incidents, performing root cause analysis (RCA), analyzing logs, and coordinating with cross-functional teams to resolve critical production issues.
• Managed end-to-end SAP Security and User Administration activities, including user provisioning, modification, deactivation, access reviews, and role assignments across SAP ECC and S/4HANA environments.
• Designed, developed, and maintained SAP roles and authorizations using PFCG, ensuring appropriate access based on business requirements and security policies.
• Administered SAP GRC Access Control, supporting ARA, ARM, BRM, and EAM for Segregation of Duties (SoD) analysis, risk assessment, mitigation, and access governance.
• Performed advanced authorization troubleshooting and security analysis using SU01, SUIM, and SU53, resolving access issues and supporting audit, compliance, and periodic access review activities.
• Partnered with business, functional, and technical teams to gather access requirements, implement security solutions, support SAP Security projects and enhancements, and maintain authorization concepts, role matrices, and security documentation.

BACHELOR OF ENGINEERING in ELECTRICAL AND ELECTRONICS ENGINEERING – Bannari Amman Institute of Technology, Erode (2017-01 – 2021-01)