Ahmad Alkurdy

• Project Manager and lead business analyst for the initial deployment of BeyondTrust Privileged Access Management solutions including Password Safe, Privilege Remote Access, and Endpoint Privilege Management
• Guided accelerated onboarding efforts to onboard all Domain Administrator accounts globally to meet Cyber-insurance renewal deadlines
• Provided guidance and assistance on internal PAM policies
• Scoped and built follow-on statements of work for continued PAM initiatives
• Maintained strategic relationships with executive-level stakeholders
• Lead initial deployment of CyberArk Privilege Cloud and Remote Access (Alero) for national medical entity
• Designed creative solutions to address unique organizational needs and technology stacks
• Created organization-specific metrics to accurately reflect how implementation progress tied to organizational priorities
• Performed lead architect role in designing CyberArk Privilege Cloud solution for a large multi-government entity installation
• Provided high level and detailed architecture diagrams
• Provided support and recommendations around the best approach for account onboarding and best practice for CyberArk tool implementation
• Assisted in meetings with the stakeholders and communicated blockers and requirements for a successful migration
• Consulted and coordinated with software stand up professional services team

• Installed and configured BeyondTrust Resource brokers in different zones
• Integrated BeyondTrust with LDAP, SAML, and Syslog server
• Ran and Analyzed scans on the client environment and performed account and asset onboarding
• Onboarded and managed different platform accounts including, Domain Admins, Local Windows and Linux Accounts, Database accounts, Networking local accounts, etc.
• Built access and password policies to meet the client needs of enabling RDP and SSH sessions
• Developed Admin runbook and trained client’s admins
• Held workshops with the stakeholders to understand the need and communicate the tool capabilities
• Held training sessions for end users and walked them through the process of checking out accounts and initiating different sessions
• Provided Ad-hoc support and knowledge transfer to the client’s team
• Provided support, consulting, and advice to PAM admins during the onboarding of service accounts into CyberArk
• Advised and assisted with the CyberArk CPM platform setup to import non-native custom platforms

• Conducted workshops with key stakeholders across the organization to understand the PAM current state
• Installed and configured cluster vaults in high availability and disaster recovery

environment

• Installed and configured PVWAs, CPMs, PSMs, and Alero
• Led the onboarding of over 10k accounts over a variety of platforms (*nix,Windows, Database, etc.)
• Conducted end-user training sessions on CyberArk usage and procedures for new CyberArk users
• Reviewed and analyzed DNA data to obtain business information and key data in order to respond to development requests
• Interfaced with a cross-functional team of business analysts, developers, and technical support professionals to determine a comprehensive list of requirements specifications for new accounts on boarding
• Troubleshot accounts configuration (password rotation, decommissioning accounts, etc.)
• Assisted with the deployment of EPM SaaS solution and provided policies recommendation to the client

• Configured Attacking tools on multiple Linux systems in a sandbox (DDOSIM, Slowloris, OWASP Switchblade, hping)
• Wrote scripts to filter, transfer, and copy logs between different servers
• Wrote Cron jobs to transfer files between servers
• Customized dashboards for log visualization in Kibana
• Automated SSH connections between systems with SSH key exchange
• Demonstrated the solution to potential customers and TCS internal teams