Mohan Sandeep

CyberArk Consultant with over 6+ years of experience in Privileged Access Management (PAM), Identity & Access Management (IAM), and enterprise security implementations. Extensive hands-on experience in CyberArk PAS deployment, onboarding privileged accounts, vault configuration, DR setup, integrations, and production support. Strong knowledge of Windows, Linux, Active Directory, cloud platforms, and regulatory compliance frameworks.

Proven ability to deliver secure, scalable, and compliant PAM solutions in complex enterprise environments.

CyberArk Consultant - Maverick Innogarage - Dover, DE

(2023-08)

• Architected and deployed enterprise-wide CyberArk Privilege Access Security (PAS) solutions aligned with security best practices and Zero Trust principles.
• Installed, hardened, and configured core CyberArk components including Digital Vault, PVWA, CPM, PSM, and PTA across multi-tier environments.
• Performed large-scale privileged account onboarding for Windows Servers, Linux/Unix systems, Oracle/SQL databases, and network devices using platform-based configurations.
• Developed and customized platform settings for password rotation, reconciliation accounts, dependency management, and service account handling.
• Designed Safe structures, access control matrices, and granular permission models using RBAC principles.
• Configured dual control workflows, approval mechanisms, exclusive access policies, and time-bound privileged access controls.
• Integrated CyberArk with Active Directory (LDAP over SSL), enabling automatic account discovery and group-based access provisioning.
• Implemented ServiceNow integration using REST APIs and ticket validation to enforce change-based access control mechanisms.
• Engineered Disaster Recovery (DR) Vault setup with PrivateArk replication, conducted DR drills, and validated data consistency and failover readiness.
• Configured Privileged Session Manager (PSM) and PSM for SSH to enable session isolation, keystroke logging, video recording, and real-time monitoring.
• Automated bulk onboarding and account management activities using PowerShell scripts and CyberArk REST APIs, reducing manual effort and operational errors.
• Developed custom automation scripts for safe creation, permission assignment, account onboarding, and reporting using PACLI and CLI tools.
• Performed version upgrades, hotfix installations, and patch management activities including Vault database maintenance and credential provider updates.
• Implemented monitoring and alerting integrations with SIEM solutions for real-time privileged activity tracking and anomaly detection.
• Troubleshot complex production issues involving CPM failures, platform misconfigurations, password reconciliation errors, and session connectivity problems, ensuring minimal downtime and SLA compliance.

PAM Engineer (CyberArk) - PeopleLogic - Delhi, India

(2021-01 - 2022-06)

• Administered and maintained the overall health of the CyberArk Privilege Access Security infrastructure, including service monitoring, component validation, and performance optimization.
• Managed CyberArk services (PrivateArk Server, CPM, PVWA IIS services, PSM services) ensuring high availability and minimal operational downtime.
• Onboarded and managed privileged service accounts, application pool accounts, scheduled task accounts, and domain admin accounts with dependency mapping.
• Configured and fine-tuned platform parameters including password complexity rules, frequency of rotation, grace periods, and reconciliation settings based on security policies.
• Implemented Privilege Threat Analytics (PTA) alert tuning and integrated logs with Splunk for centralized log correlation and privileged activity monitoring.
• Developed automated health-check and reporting scripts using PowerShell to monitor password change failures, locked accounts, and session manager connectivity.
• Provided L2/L3 operational support by troubleshooting CPM plugin failures, PSM connection components, credential provider issues, and IIS-related PVWA access errors.
• Analyzed Vault logs, Windows Event Viewer logs, and CyberArk trace files to perform root cause analysis and implement permanent fixes.
• Collaborated with application teams to integrate Credential Provider (CLIPasswordSDK) and Conjur-based integrations for secure, hardcoded credential elimination.
• Assisted DevOps teams in implementing secure secrets management workflows within CI/CD pipelines using CyberArk REST APIs.
• Conducted quarterly privileged access certification campaigns, generated compliance reports, and supported internal/external audit evidence collection.
• Implemented account discovery scans and remediated unmanaged privileged accounts across Windows and Linux environments.
• Created custom SQL-based and API-driven reports for tracking password compliance status, privileged access usage trends, and orphaned accounts.

Security Analyst (IAM/PAM) - Persistent Systems - Bangalore, India

(2019-01 - 2020-12)

• Assisted in enterprise-wide implementation of CyberArk Privilege Access Security (PAS) by supporting infrastructure readiness assessments, prerequisite validation, and environment hardening activities.
• Performed privileged account discovery and risk assessment using CyberArk DNA, analyzing unmanaged accounts, shared credentials, and policy gaps across distributed environments.
• Prepared detailed remediation reports based on DNA scan results, identifying high-risk privileged accounts and recommending onboarding and access control strategies.
• Designed and implemented standardized Safe naming conventions, access hierarchies, and segregation models aligned with enterprise security governance policies.
• Automated Safe creation and bulk permission assignments using PowerShell scripts and REST API calls to ensure consistent access provisioning.
• Configured and optimized PSM for SSH and RDP connectors, including hardening connection components, configuring session policies, and enabling transparent connection modes.
• Developed custom connection components and modified PSM configuration files to support non-standard ports and custom target environments.
• Conducted vulnerability remediation activities by eliminating shared admin accounts, enforcing password rotation, and removing embedded credentials from scripts and configuration files.
• Generated compliance evidence and technical documentation for SOX and PCI audits, including password rotation logs, access approval workflows, and session recording validation reports.
• Assisted in performing privileged access risk assessments and policy gap analysis, recommending technical control enhancements to strengthen privileged account governance.

Masters - Computer Science - University of North Texas

Bachelors - Computer Science and Engineering - Andhra University