Application, Data and IAM Security

This project delivers an integrated enterprise data security and compliance solution by implementing and operating IBM Guardium, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Vormetric Encryption, and Illumio technologies. The engagement strengthens the organization’s ability to monitor, protect, and govern sensitive data across on-premises, cloud, and hybrid environments.

  • Strengthened enterprise data security governance and monitoring across databases, endpoints, file systems, and cloud platforms to protect sensitive data and meet regulatory compliance requirements.
  • Partnered with Information Security, Network/Firewall, IAM, and Application Security teams to align enterprise security controls, policies, and cross-functional security operations.
  • Architected and implemented database activity monitoring and data protection solutions using IBM Guardium, supporting DB2, MSSQL, and Cloudera environments with customized policies, audit rules, and alerting frameworks.
  • Led enterprise database vulnerability management initiatives using Guardium Vulnerability Assessment, conducting large-scale scans, analyzing findings, and delivering remediation strategies aligned with security best practices.
  • Delivered executive-level security reporting including weekly, monthly, and quarterly compliance and vulnerability reports to Information Security Risk teams, leadership, and the CISO.
  • Directed large-scale Data Loss Prevention (DLP) deployments across 1,500+ Windows VDI endpoints and 300+ Linux servers, enabling protection of PHI/PII through file system scanning, monitoring, and policy enforcement.
  • Implemented Cloud DLP and CASB capabilities across enterprise SaaS platforms including OneDrive, SharePoint, ServiceNow, and security tooling ecosystems to ensure continuous protection of sensitive data.
  • Engineered data-at-rest encryption solutions using Vormetric Transparent Encryption (VTE/CTE) across AIX and Linux environments, securing DB2 databases and sensitive file systems with minimal application impact.
  • Supported Zero Trust and network segmentation initiatives by deploying Illumio VEN agents and generating enterprise data flow analysis to strengthen data-in-transit security and overall network posture