Redentor Del Rosario

• Designed and architected the Microsoft FIM-MIM framework for developing an IAM from Legacy IAM including capacity planning like Topology, Hardware, MIM Policy Configuration Objects, Scale, and Load • Configured and created Self-Services registration password portal URL that browser will navigate to when the "Register for password reset" link on the FIM portal homepage is clicked ex. https://pwreg.company.com include Port for communication and to Grand authentication to user on the FIM Portal site • Configured the FIM Service Management Agent, using synchronization service manager, created FIM Service and connected to database using server dbFIM service and database FIM Service the base address http://fimservice.company.com:5725 and authentication using Windows Integrated authentication svcFIMMA with domain name AD, configure other like Object Types, Attributes, Connector Filter, Object type mappings, Attributes flow, Deprovisioning, extensions. • Configured Role-Based Access Control (RBAC) with BHOLD, Role-based access control, defined business function roles, business task, system groups profiles, created access management connector resource control display configuration (RCDC) modification, created SQL management if needed otherwise will go to OU structure, integration on MIM/FIM for RBAC module on the BHOLD Self-Service Portal, modify BHOLD Core for home, value to setup attestation module.

• Configured vulnerability assessment and performed assessment process of identifying and analyzing a system or network for any potential vulnerabilities, flaws or weaknesses that could leave it open to exploitation. This environment supports 500,000+ users. • Deployed and configured VMware vRealize Automation, along with configuring and controlling all the operating systems with abstracted management for Linux, Windows, MacOS, and Unix. • Implementation of RSA Archer v6.0x eGRC platform with Splunk SIEM for all the Threat, and Unified Governance Platform for compliance along with Roles, process the Policy, Risk management to control against regulatory scrutiny and errors. • Actioned to any incident response to any Web APIs, Workflow, Notifications or Alerts, Application Builder, Audit Management, Appearance, Legal Domains, Finance, and Access Control • Performed different types of scope of test for stage of Lifecycle penetration testing, compliance testing, vulnerability assessment testing, white box, black box, grey box, purpose testing. • Built and aggregated the Event Logs for FortiGate v5.6, Cisco ASA, Juniper Networks, Checkpoint, Huawei, Sourcefire, Palo Alto Network, using IBM QRadar, Splunk, McAfee Nitro, Sophos, Elasticsearch, and other SIEM. • Deployed, implemented, and configured automatically enforce desired state across your entire IT footprint. • Defined compliant states with pre-built CIS and DISA STIGs content and enforce them with automation. • Audited and understood VMware vRealize the configuration state of your entire ecosystem quickly and easily. • Created VMware vRealize fully automated or semi-autonomous workflows that can notify administrators via third-party integrations or even create ITSM tickets when systems need attention. • Conducted Penetration Testing and performed an evaluation of a system or network’s current state of security and its likelihood to be susceptible to a successful attack by a malicious hacker

Utilized TCP/IP protocols while working with LTE, CDMA, GSM, MPLS, MESH, IPv4/IPv6, QIP IPAM, eLTE Wireless, Cellular wireless networks, LAN/WAN, wireless networks, and to create command lines for programming Cisco routers Configure Name, VPN Device IP Address public facing IPv4 address of me on-premises VPN device that I use to connect to Azure. This environment supports 500,000+ users. • Addressed Space stating my CIDR (Address Count), specified the address range(s) to be sent through the virtual network gateway to the local on-premises location. If a destination IP address falls within the range, it is routed through the virtual network gateway.

Created a user Accounts from ForgeRock OpenAM to set a unique ID Site, within administration with using formatting conventions, on ForgeRock OpenAM Web-Based Console over a standard Java EE http protocol to a FQDN port 8080 specific working on ForgeRock OpenAM Command-Line Tools script tools example agentadmin policy agent installations to unpack the policy agent installation, ampassword to change specific encrypted password values, amverifyarchive to check log archives for any tampering, configure core services with using ssoadm command such as network routing restrictions load balancer by using a self-certificate for HTTPS for nodes otherwise you cannot access due to restriction. ForgeRock OpenAM to set a unique ID Site, within administration with using formatting conventions, on ForgeRock OpenAM Web-Based Console over a standard Java EE http protocol to a FQDN port 8080 specific working on ForgeRock OpenAM Command-Line Tools script tools example agentadmin policy agent installations to unpack the policy agent installation, ampassword to change specific encrypted password values, amverifyarchive to check log archives for any tampering, configure core services with using ssoadm command such as network routing restrictions load balancer by using a self-certificate for HTTPS for nodes otherwise you cannot access due to restriction.