Adam Kejji

Global energy major

• • PAM (People, Process & Technology) maturity assessment and definition of target governance model with policies, standards, and onboarding controls

• • PAM PAM (BCP/DR) business continuity/disaster recovery plan, emergency access (icebreaker) model, and service account governance framework for non-human identities

• • Assessment of over 2,500 servers and 6,000 privileged accounts; onboarding rate increased from 60% to 80%; provisioning time reduced from one week to less than 20 minutes through automation

• • Implementation of 170 CyberArk PTA detection use cases; delivery of 10 SIEM correlation rules for privileged access threat detection

• • Design of SIEM integration strategy (CyberArk, Active Directory, Linux) for end-to-end visibility of privileged activities,

• • Design of the service account management model (governance, lifecycle, onboarding standards) and the PAM framework enforcing zero direct privileged access outside of PAM

• • Onboarding of all OS application fleet (300 applications) to PAM; integration with DBeaver and MongoDB Compass; complete removal of direct privileged access outside the PAM scope

• • Development of icebreaker automation scripts for emergency access control and writing of PAM operational guides,

Electricity Transmission Network Manager (CIAM program) & Nuclear Safety Authority (identity modernization)

• • Delivery of a CIAM platform for over 27,000 users: SSO portal, multi-factor authentication (MFA) implementation, integration of 5 business applications, and GitLab DevSecOps pipeline

• • Design of the migration strategy for Joiner-Mover-Leaver (JML) workflows under MIM and reduction of synchronization load through architectural optimization; improvement of identity lifecycle governance and traceability,