Gunpreet Singh Bedi

Onsite implementation engineer for all existing Courion customers in GCC and accountable for

Password Courier used for change/reset password & password synchronization across multiple target systems
Account Courier used for provisioning/de-provisioning users
Compliance Courier used for access reviews per system/entitlement/ownership
Access Request manager (ARM) used for managing user access, role/entitlements management
Access Intelligence (AI) used for defining SoDs, risk evaluation & mitigation techniques
SSRS used for developing customized Reports as per the Customer requirements

Implement a centralized automated Access Assurance process, to enable more secure, efficient, services to a diverse population including employees, part time workers, and contractors.
Indulge in discovery sessions and requirement gathering sessions with Customers to understand the exact scope of work
Implement different Courion modules (as stated above) as per the customer requirements
Integrating various external connectors like Active Directory, Oracle HRMS, Oracle EBS, Database, CSVs, other banking/physical applications with Courion IDAM
Installation & configuration of Courion tool in the Dev, QA and Prod box for the customer
Taking the testing signoff from customer on the business cases in the QA and Dev box
Preparing the design document based on the customer business cases as part of the implementation design phase
Supporting the customer in the Go-live process
Supporting the customer after go-live in case any issue.

Implementation Team) - Identity & Access Management Group

Worked on Identity & Access Management Tool and accountable for
AlertAccess user for provisioning and de-provisioning of users
AlertIdentity for IDM (Identity Management Tool)
AlertCertify used for Annual User Access Review & NERC CIP
AlertRoles used for creating Enterprise, Resource roles
AlertInterceptor used for SOD analysis of SAP system

Projects Handled:
1) DUKE Energy
This project had both logical as well as physical connectors in the scope for integration with main emphasis on the multi-language support & time zone adjustments for different sites

Accountabilities:
Implemented the IDM product on customer environment, configured identity and access module. Remotely support to all customer and work on their concern
Build Deployment on WAS Server-
Server Setup with configuration of DM manager, Terracotta, Node agent,
Putty commands to handle deployment process, IBM console settings for library files, DB setting Etc.
Deployment of Build on WebSphere with setting of Java, IBM MQ/ ActiveMQ JMS service.
Connectors-
Deployment of connectors - SAP, LDAP, AMAG, GEPP, File, Database.
Provisioning mapping, attribute mapping and setups of connectors in application to sync the data
Checking the test connection and fix the issue if any
Generation & Import of SSL Certificate for Active Directory

Migration activity-
Running the migration script on the Database when we migrate from old to new version of application, Handling the both database oracle and SQL for migration, Drop and create the tables to update the database for new release
Provisioning user-
Provisioning the user into Different systems like Database, SAP, LDAP, Exchange, AMAG, GEPP, etc. with all the details needed
Mass Upload functionality for users and mapping with these External systems
Workflow Management-
Designing the workflow according the customer requirement, using the concept of Fork, detour etc.
Designing the path for the manager and owners to approve the request
Risk Analysis (Compliance and Audit):
Risk analysis and mitigation for the roles assigned to the user. Setup of rule engine and SAP to perform the risk analysis, analysis of roles which have risks, removal of the role from the user which create risk into system. Mitigation and remediation control activity
Reports dashboard and logs management
Deploying/Importing the reports on database to check the status of the raised requests, by using report we find details of Requester, user, access details, expiry date etc. Reading the logs of the application to troubleshoot the issue like failure of user provisioning.

2) CPSE
Identity and Access Management along with Critical Infrastructure Protection (CIP) and Recertification was the overall scope of the project. Major milestone for this project was to build reverse Reconciliation concept as per the scope of the customer

Accountabilities:
Operational Competency-

Perform problem analysis, solution determination, development, integration, testing.
Requirement walkthroughs.
Interacting with the product owner, Dev/QA groups regarding product enhancements.
Deploying the Identity product suite on to the customer environment.
Modification, documentation and provide software support to clients.
Setup of Identity, Password & Provisioning Policy.
Efficient planning & co-ordination of activities with quality work.
Password Management-
Create/Change/Forgot/Reset password functionality across all the systems.
Worked on the policies of the password management.
User Creation with Risk Scoring-
Creation of users with Risk analysis.
Assignment of default roles with the Identity profile hiring.
Emergency Change Request-
Worked on the process of Emergency change request.
Enforcement of the policy for the emergency change request.

of Self Governance Team (SGT) to act as a link between the trainees and the Management.
Projects Handled:

Courion’s Password Management Solution

This solution enforces consistently strong password policies & enables users to instantly and securely reset their own passwords on enterprise systems, application & Web portals.
Accountabilities:
Password Management Module (PMM)
Workflows creation for self-service Password reset functionality
Configure strong password policies/functions & associate them with the pre-defined workflows
Enable/create Staff-assisted password reset workflow in Forget Password case of the user
Synchronization of different workflows through redirect chaining using the same password
Configure a more secure authentication using a onetime Authentication Token
Create Integrated AD Authentication framework

POCs Handled
UAE Exchange Account & Password application setup & integration as per the scope of the POC
Al Hilal Customized the IDAM solution as per the requirement in very short span of time.
SAP PQ Integrated IDAM solution with SAP HR Module to trigger the inflight requests till the provisioning of the users in physical systems
NIPSCO Build reports & dashboards for the Risk Analysis module to demonstrate the risks associated with every entity of the organization
PNM application deployment & scenarios building as per the asked POC setup