Lakshminarayanan M

Strategic Privileged Access Management (PAM) Specialist with 9.5+ years of experience delivering enterprise-scale PAM solutions across BFSI, Aviation, and Life Sciences. Expert in CyberArk, Delinea, and BeyondTrust, with focus on HA/DR, Just-In-Time (JIT) access, and automation. Proven ability to integrate PAM with IAM, SIEM, and cloud platforms, aligned with Zero Trust, NIST, and ISO 27001 frameworks. Reduced attack surface and strengthened privileged identity governance.

Senior Consultant - EY INDIA

(2023-02)

• Architected and led Delinea PAM and converged IAM implementation, securing 5,000+ privileged accounts
• Designed HA/DR architecture ensuring high availability and resilience
• Engineered REST API integrations with Splunk, APIGEE, SAML, and MFA to strengthen security posture
• Deployed Privilege Manager (EPM) SaaS, enforcing JIT access, integrating with SIEM/IAM, and reducing attack surface
• Led PAM maturity assessments aligned with NIST and ISO 27001, implementing remediations and security hardening to achieve enterprise-wide compliance
• Defined PAM frameworks and led solution design, PoCs, PoVs, and client proposals, aligning technical security solutions with business ROI
• Automated privileged account lifecycle and remediated orphaned, dormant, and non-human identities (NHI) using Splunk, enforcing Least Privilege (PoLP) and security controls to ensure audit readiness

Senior Associate - PwC AC

(2022-02 - 2023-02)

• Led Delinea Proof of Value (PoV) engagements for aviation clients, reducing projected administrative overhead by 25% through EPM validation
• Deployed Privilege Manager (EPM) SaaS with Azure AD integration, establishing governance frameworks, scalable policies, and automated compliance reporting
• Led application discovery across Windows and macOS environments to assess risk and establish a Least Privilege (PoLP) roadmap
• Designed granular JIT and deny policies for high-risk applications, automating the removal of standing administrative privileges
• Integrated Secret Server with Connection Manager and automated JIT provisioning using PowerShell and REST APIs

Solution Advisor - DELOITTE USI

(2021-05 - 2022-01)

• Analyzed security requirements for 150+ applications, achieving a 13% project conversion rate by translating business needs into PAM service offerings
• Automated BeyondTrust onboarding using Discovery and Smart Rules across Windows, Linux, AWS, Oracle, and network devices
• Managed privileged identity lifecycles using RBAC and Just-In-Time (JIT) access, automating service account management and session monitoring
• Led BeyondTrust Password Safe administration, including platform upgrades and DR drills to ensure 24/7 availability

Associate - COGNIZANT TECHNOLOGY SOLUTIONS

(2018-12 - 2021-05)

• Managed on-premises Delinea Secret Server infrastructure (web nodes, RabbitMQ, distributed engines), ensuring high availability for a global Life Sciences client
• Played a key role in enterprise ransomware remediation, restoring security posture by migrating compromised accounts to Dell TPAM using shell scripting
• Led end-to-end migration from Dell TPAM to Delinea, customizing secret templates, connectors, and event pipelines to meet business requirements
• Developed HLD/LLD designs, runbooks, and user guides, executed UAT, regression, and performance testing using HP ALM to ensure platform stability
• Automated account onboarding using REST APIs, eliminating hardcoded passwords through programmatic credential retrieval

Programmer Analyst - COGNIZANT TECHNOLOGY SOLUTIONS

(2016-08 - 2018-11)

• Administered CyberArk (Vault, PVWA, CPM, PSM) and HashiCorp Vault to remediate non-compliant accounts and enforce security controls
• Deployed NetIQ NPUM agents on Linux for Privileged Session Management (PSM), enabling session recording for audits and access certifications
• Automated CyberArk reporting using SQL and developed SOPs to improve operational efficiency and platform stability

B.E. - Electronics and Communication Engineering - SSN College of Engineering (2016)