Lekasri N

IAM & PAM Engineer with 2 years of experience in Identity and Access Management at Tata Consultancy Services, supporting Active Directory, privileged access management (PAM), and user lifecycle operations in enterprise environments. Experienced in JML processes, access provisioning, access certification and recertification, least-privilege enforcement, and ServiceNow-based access request handling. Microsoft certified in AZ-900 and SC-300 with hands-on experience in enterprise IAM operations, privileged access governance, audit readiness, and security managed services delivery across enterprise environments.

Security Engineer – Identity & Access Management at Tata Consultancy Services (TCS) (2024-01 – Present)

• Managed IAM operations including access provisioning, de-provisioning, and role-based access control (RBAC) in an enterprise Active Directory environment, handling ~20 requests daily with 95%+ SLA compliance.
• Resolved PAM/IAM security incidents (account lockouts, unauthorized access, BeyondTrust PAM issues), maintaining 95%+ SLA adherence and minimizing business access disruptions.
• Administered BeyondTrust Password Safe — onboarding privileged accounts, controlling session access, and ensuring no elevated rights remained unmonitored or unreviewed.
• Managed end-to-end JML (Joiner-Mover-Leaver) lifecycle — handling access provisioning for new joiners, RBAC implementation based on role and department, and access revocation for leavers; maintained AD security groups aligned with least-privilege principles.
• Conducted periodic access certification and recertification campaigns to remove stale and over-provisioned access; supported SOX audit activities by providing AD group membership details, user access records, and privileged account information for audit validation.
• Reduced access request turnaround time by streamlining the end-to-end provisioning workflow in ServiceNow — from request intake through AD changes to closure.
• Contributed to security assessments and access audits to identify vulnerabilities and recommend remediation, supporting overall security posture improvement and compliance adherence.
• Used PowerShell for bulk AD tasks (batch provisioning, group membership updates); supported Salesforce account provisioning as part of application-level IAM operations.
• Gained exposure to SailPoint Identity Governance (IGA) concepts including access provisioning, lifecycle management (JML), and access certification workflows; actively building skills in SSO and cloud IAM technologies.

Bachelor of Engineering (B.E.) in Agriculture Engineering – Bannari Amman Institute of Technology (2019-01 – 2023-12)