Marvin Grande

MBA-credentialed cybersecurity professional with 20+ years of experience in Identity & Access Management (IAM), Privileged Access Management (PAM), and enterprise security engineering. Combines deep technical expertise in zero-trust architecture, PKI/certificate management, SSO/MFA, and threat mitigation with business-level acumen developed through graduate studies in Cybersecurity & Business Analytics. Proven track record designing and automating secure enterprise solutions at scale, with leadership experience across cross-functional teams and compliance frameworks including NIST 800-171, ISO 27001, SOC 2, and GDPR.

IAM Engineer (Senior) - Allstate Insurance

(2020-11)

• Architect and administer enterprise IAM platforms spanning PKI, certificate lifecycle management, and key management infrastructure — securing access for tens of thousands of identities.
• Lead integration and ongoing maintenance of SSO and MFA systems leveraging JWT, OAuth 2.0, SAML, and OIDC; reduced authentication incidents by streamlining federation across 30+ applications.
• Drive automation of IAM workflows using PowerShell and Python, eliminating manual provisioning steps and reducing access review cycle time.
• Own the BeyondTrust PAM environment end-to-end — strategy, implementation, and continuous alignment with zero-trust IAM goals.
• Apply MBA business analytics skills to present IAM program metrics and risk posture to leadership; translate technical findings into executive-level risk reports.
• Provide Tier-3 escalation support, mentor junior engineers, author security runbooks, and lead incident response for access-related threats.
• Collaborate with Security Architecture, DevSecOps, and Compliance teams on LDAP/Active Directory integrations and regulatory controls (NIST 800-171, SOC 2, GDPR).
• Conduct regular vulnerability assessments and design compensating controls; track findings through remediation using structured risk frameworks.

Infrastructure Engineer – Team Lead - Allstate Insurance

(2016-09 - 2020-11)

• Led enterprise monitoring operations across Datadog, Splunk, SCOM, and Dynatrace for a large-scale financial services environment.
• Directed vulnerability management program: prioritized CVE remediation, coordinated patching cycles, and reduced critical exposure windows.
• Managed enterprise batch scheduling via IBM TWS, ensuring SLA compliance for critical business processes.
• Mentored junior engineers, established team best practices, and drove process standardization across infrastructure teams.

Network Engineer - Clear Point Claims

(2016-06 - 2016-09)

• Delivered Tier III support for Microsoft Exchange, ShoreTel VoIP, and Thin Client environments.
• Managed VPN configurations and led cloud migration efforts to improve system availability and performance.

Implementation Specialist - SeedSpark

(2014-04 - 2016-06)

• Directed server and VoIP migration projects, coordinating with vendors and stakeholders to deliver on time.
• Provided technical and contractual support to enterprise clients, ensuring smooth system transitions.

EPIC Analyst - Novant Health Care

(2012-08 - 2014-04)

• Administered EPIC EHR upgrades and managed access provisioning in a HIPAA-regulated environment.
• Built operational reports and dashboards in Crystal Reports; led data migrations with zero data-loss outcomes.

MBA - Cybersecurity & Business Analytics - University of North Carolina Wilmington (2025-05)

B.A. - Chemistry - University of North Carolina Charlotte (2017-12)

A.S. - Network & System Administration - DeVry Institute of Technology, New York (2000-05)