BHARGAV VIVEKANANDAN

• Set enterprise security strategy and drive strategic planning and implementation across the organization; lead security product vision, roadmap, and cross-functional propagation of security capabilities.
• Own organization-wide risk management: identify, assess, and manage risk, and facilitate risk governance processes across the enterprise.
• Envisioned, architected, and led end-to-end development of Kosmic Eye, a Unified Security Posture Management (USPM) platform built as a Generative AI-ML agentic, cloud-native application protection platform (CNAPP) — owning both the architecture design and the engineering execution personally, and directing a team of engineers from concept through delivery.
• Designed a full-stack, CNCF-powered agentic AI/ML engine combining classical and quantum computing approaches with small- and large-scale LLMs and non-generative AI models (decision trees, computer vision) to deliver autonomous, real-time cloud security posture assessment.
• Packaged Kosmic Eye as a cloud-native marketplace offering deployable directly within customer tenants, enabling self-service adoption and rapid time-to-value.
• Serve in a dual CISO/Security Architect role for Tek Yantra’s managed security services engagement with the California Department of Child Support Services (DCSS): architect and implement DevSecOps and CI/CD pipelines and SFTP migrations for cloud optimization, act as single point of contact for DCSS’s Information Security Organization (ISO), and advise on Kubernetes-based infrastructure orchestration.
• Continuously evaluate emerging threats and technologies to drive ongoing improvement of the organization’s security posture.

Primary security risk assessor for the Risk Escalation Committee (REC) that is a committee of senior security and privacy leaders, enterprise architecture leaders, business leaders as well as legal counsel in treating security risks
Planned, Developed and executed Artificial Intelligence (AI) Security Assessments including but not limited to generative AI use cases involving homegrown and third-party products

Currently playing the role of a Subject Matter Expert (SME) in the area of AI Security Risk Assessments
Conducted IT HIPAA Security Assessment on an annual basis of BSC assets including but not limited to software/hardware assets on premises, hybrid and externally hosted in the public cloud Conducted the IT HIPAA Technical Safeguards Assessments focused on technology, processes , policies , standards and architectures of business products

Conduct risk assessments of third-party vendors, enterprise risks and exceptions to policies and standards for the escalation committee and present recommendations to committee
Co-Led the cloud security compliance planning for the hybrid/multi-cloud including MS Azure, Google Cloud Platform (GCP) and On-Premises infrastructure

Experienced in the MS Defender for Cloud and provided expert analysis of cloud based systems for the enterprise
Planned and developed the multi-hybrid cloud automated continuous risk assessment

strategy and detailed solution architecture for the future state
Conducted Rapid Risk assessments multi-cloud products and measured the overall security posture Worked closely with stakeholders from rest of IT, Security Architecture, Security Engineering to devise mitigation plans and security solutions
In charge of generating periodic reports and analytics for the REC

Extensive experience in analyzing web application security scan reports from Cloud Native Application Protection Platforms (CNAPP) such as Wiz and Microsoft defender for cloud.

Hands-on experience in planning, envisioning, architecting and implementing API security for the Service Oriented Architecture (SOA) and Application Integration Platform (AIP)

Expertise in assessing REST/JSON API based system against HIPPA, PCI and industry standards such as NIST and CIS.

• Currently leading the security partnership with IT Security to improve the security capabilities of cloud engineering by collaborating, strategizing and executing security solutions for the Hybrid cloud, IaaS and CaaS web infrastructure
• Currently Leading the service improvement plan to identify opportunities to automate the Legacy, Hybrid Cloud, On-Prem IaaS and CaaS web infrastructure
• Provided middleware engineering solutions for web infrastructure requirements specifically Java Web Applications, WebSphere Application Server, Datapower, MQ, IBM Integration Bus and MQ Managed File Transfer
• Technical Leadership, Solution Architecture and DevOps in the web infrastructure space, successfully participated in all phases of the Solution Architecture Development for the Application Integration Platform (AIP) and lead the technology architecture all the way till successful implementation Actively participate in the Change Management & Governance phase of the ADM cycle for the AIP in monitoring the effectiveness of the architecture in action.
• Took ownership of a detailed Gap-Analysis of the current state of the Enterprise Monitoring Infrastructure in BSC and identified a list of Business domain, Data Domain, Application and Technology gaps that were reported to the Enterprise Monitoring team.
• Established an end to end application, server and database monitoring system collaborating with the enterprise monitoring team employing COTS products.
• Worked closely with the Problem Management team in identifying gaps in the existing Consumer Member/Employer Portal application and addressed the same to achieve an efficient target solution addressing performance, high availability and stability issues.
• Pivotal role in management and provisioning of web infrastructure environments in PaaS offerings Major incident and problem management of web infrastructure assets Establish Middleware Technology standards and apply it to the IT Organization.
• Work on Project based roles providing middleware engineering expertise and application operations support expertise.
• Act as a final technical escalation point for the Middleware related issues Manage the software life cycle of the Application Server software.

• Contribute to the development of an industry standard for the implementation of SBOM for the cloud
• Develop a solution that can be applied to all types of cloud deployment models including public, private and hybrid as well as cloud services including but not limited to Infrastructure As A Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS)
• A global standard that can be adopted by any industry and by consumers and cloud service providers (CSP) alike
• Brand agnostic coverage of the full technology stack from the application tier to the bare metal tier
• A publication on the SBOM Cloud Stack Transparency that addresses the following,

1. Thought process behind the solution development

2. The significance of the shared responsibilities matrix for cloud service types

3. Cloud technology stack derivation from the reference architecture

4. Table of distinct technology components per technology tier

5. Use Cases and relationships with the larger SBOM solution development streams

• Worked on project based roles in the IT Infrastructure Management area providing expertise in all aspects of web infrastructure management and application lifecycle management
• Technology leadership in the web infrastructure space for both internal organization and clients Client interfacing roles as a technical leader with major US based industrial and insurance customers
• Multi-faceted role involving both hands-on technical implementation as well as issue resolution and management of support teams Built lasting relationships and trust with customers Projects
• IBM Technical Leader at John Deere - Moline, IL - Oct 2010 - Jan 2015
• Technically lead a team of middleware administrators in supporting the John Deere shared internet processing environment comprising of hardware load balancers, Linux/Windows virtual machines hosting hundreds of Deere web sites running on Java, BIGIP and WebSphere Application Server Acted as a single point of contact representing the IBM team to the customer and handle ticket management, technical issues, driving them to closure and resolution
• Assumed leadership in identifying chronic problems in the quality of delivery of the IBM team and engaged with the customer in re-iterating the customer's business requirements in order to re-shape the Business Architecture and implemented a successful combination of people, process and technology resources to solve the chronic issues with service delivery. Review Web Middleware infrastructure concepts and design and recommend improvement suggestions (middleware,database, connectivity, security, access etc.,)
• Provide input to the required delivery support teams as needed in an effort to increase Web Middleware software product's availability Review new web middleware environment requirements and architect/design web middleware environments
• Provide input for new web middleware environment architecture Providing improvements for improving the overall performance.
• This includes architecture review, design review and the overall system integration perspective.
• IBM Transition Leader - CNA Insurance - Chicago, IL - 05/2010 - 09/2010 New Client Knowledge Transition to IBM India
• Successfully transitioned technical and process knowledge.from the client to the IBM offshore team Ensured IBM specific compliance standards are met in the.engagement.
• IBM Subject Matter Expert - Chennai, India - 10/2009 - 05/2010
• Assisted management initiative to set up a middleware center of excellence enabling technology aspirants.to move on to the complex technical environment and take on higher-level support Actively participated in the.planning of the CoE program Assisted in developing technical assessment standards and questionnaires.

• Performed the roles of an Technical/Project Leader with various insurance and banking clients in North America and the United Kingdom.
• Subject Matter Expert in WebSphere Application Server administration Performed a multi-faceted role in performing technical delivery, solution architecture as well as people management Participated in Request for Proposals and won a key technology migration project for Cognizant Trained and groomed budding engineers to nurture them for IT enterprise support Projects
• Technical Expert - Lloyds TSB Bank - London , United Kingdom - 01/2009 - 08/2009
• Prepared and finalized the project proposal including the Project Plan, Resourcing and technical strategy. Planned for training programs and conducted project specific induction programs including and assessed the resources.
• Worked closely with the client SME in deciding the weekly plan for the Knowledge Transition Phase Lead the team during the Knowledge Transition phase and ensured successful certification of all gateways. Prepared comprehensive documentation during the Knowledge Transition Phase.
• Installed and Configured WebSphere Application Server v6.x on Unix Shared environments. Deployed clusters and applications using automated scripts.
• Infrastructure Lead - Great West Life Assurance Company - Winnipeg, Canada - 01/2008 - 12/2008
• Lead a team of 6 infrastructure engineers in migrating WebSphere Application Server and WebSphere Portal Server infrastructure from v5.x to v6.x in client environments.
• Played a pivotal role all the way from the preliminary phases of the ADM cycle in requirements gathering, defining the target state, business, application, technology architectures to the final completion in the project to migrate customer's WebSphere 5.x infrastructure to WebSphere 6.x Prepared and estimated the Project Plan encompassing the implementation strategy, time duration, costs and resources.
• Successfully lead a team in completing a proof of concept for migrating client's existing middleware infrastructure employing both the manual and automated methodologies.
• Provided comparative metrics in order to determine the infrastructure migration strategy.
• Provided consultation on technical decisions and best practices for the client Designed the automated migration strategy.
• Project Leader - Metropolitan Life Insurance Company - Chennai, India & Somerset NJ - 01/2007 - 12/2007
• Responsible for managing and project delivery for a team of 4 members providing 24/7 application and environment support.
• Successfully completed the Knowledge Transition Phase by traveling to Client location and understanding the architecture and educating the offshore team on the same by means of video recordings and Documentation.
• Prepared and finalized the project plan during the initial stages of the project and obtained sign off from the client.
• Co-ordinated the onsite-offshore operations by means of implementing onsite-offshore turnover and daily calls with the onsite co-coordinator.

• Trained on IBM Middleware Technologies Worked on Project based roles as a systems analyst with Accenture and CSAA providing expertise in WebSphere Application Server Administration