Palak Bisen

4 years of IT experience across Identity & Access Management, Identity Governance & Administration (IGA), GRC, and DevSecOps. Hands-on with Microsoft Entra ID-based access governance, identity lifecycle management, access certification campaigns, IT General Controls (ITGCs) for SOC2 and SOX compliance, network and user access reviews, and security metrics program design. Earlier background in DevSecOps pipeline engineering with cloud and container security tooling.

Identity & Access Governance Engineer - Capgemini

• Administer Microsoft Entra ID-based IGA platform — processing 100-120 access requests monthly across 5 production and 3 non-production environment segments for 500+ identities. Manage end-to-end access request lifecycle (provisioning, recertification, revocation) with role-based entitlement framework, org-hierarchy approval matrices, and automated approval policies by job function.
• Execute identity deprovisioning across an enterprise network management platform — handling 10-15 offboardings monthly with 1-2 emergency terminations daily across 14 defined scenarios including privileged accounts, federated identities, and cross-environment collaboration accounts. Enforce 24-hour SLA, validate session timeout (15 mins or less), MFA compliance, and enhanced login security on every offboarding event.
• Own quarterly Network Rule Reviews across 4 cloud environments (AWS, Azure, GCP, OCI) — reviewed 13,379 firewall rules with 48% YoY growth — analyzing overly permissive configurations, unused rules, and any-to-any communications.

Conduct User Access

Reviews (UAR) across 30-40 enterprise systems as ITGCs. Both controls support SOC2 and SOX audits with zero findings.

• Designed security metrics and KPI/KRI framework for Vulnerability Management — 7 alert metrics and 6 value metrics including MTTR of 25 days, SLA compliance rate of 95.3%, and false positive rate monitoring. Leveraged AWS Kiro (agentic AI) for automation scripting and documentation — reducing manual effort by 45% and improving script development speed by 90%. Expanding framework across 8 additional security domains.
• Enforced least privilege and Segregation of Duties (SoD) across 20+ enterprise systems; delivered audit evidence and control validation for SOC2 and SOX assessments with zero findings across all review cycles.

DevOps & DevSecOps Engineer - Capgemini

• Designed enterprise CI/CD pipelines (Jenkins) with RBAC and integrated DevSecOps toolchain — SonarQube (SAST), Trivy (container scanning), Snyk (SCA), JFrog Xray, OWASP ZAP (DAST) — enforcing shift-left security gates across Dev, QA, and Production environments.
• Managed LDAP-based identity via RedHat IdM; triaged Qualys/Snyk vulnerability findings improving remediation timelines by ~25%.

Deployed

Kubernetes workloads on AWS EKS via Helm; automated operations with Bash reducing manual effort by ~30%.

B.Tech - Computer Science & Engineering - Oriental Institute of Science & Technology, Bhopal (2018-01 - 2022-12)