Luis Freitas

PAM & Security Automation Engineer | Critical TechWorks

• Infrastructure Automation & GitOps: Engineered the CyberArk infrastructure management using an Automation-First mindset, establishing a GitOps workflow to maintain configuration as code and a Single Source of Truth, achieving 99.9% service availability and reducing configuration drift to near-zero.
• Improved code deployment efficiency by automating processes with CI/CD pipelines.
• Maintained version control systems like Git or SVN for seamless collaboration among developers and engineers during project lifecycles.
• Designed and implemented containerization strategies using Docker and Kubernetes, improving resource utilization and management.
• Monitored automated build and continuous software integration process to drive build/release failure resolution.
• Automated manual tasks through scripting languages such as Python or Shell, boosting team productivity levels.
• Contributed to the creation of a DevOps culture within the organization, leading to increased agility and cross-functional collaboration.
• Mitigated security risks by conducting regular vulnerability assessments and applying necessary patches.
• Infrastructure Automation & GitOps: Engineered CyberArk infrastructure management using a GitOps workflow, achieving 99.9% service availability and reducing configuration drift to near-zero.
• API Design & Microservices: Designed internal Microservices and APIs to expose PAM capabilities, reducing the time to onboard new customer applications by approx. 40%.
• Advanced CyberArk Engineering: Developed custom CPM plugins and PSM connectors to extend PAM coverage to [X] distinct non-standard technologies.
• Service Reliability: Maintained the automated health of the PAM ecosystem supporting [300 000] internal identities and [200] critical servers.
• Process Architecture: Championed Engineering Excellence by designing adaptive security processes for emerging technical challenges, balancing robust security controls with developer agility.

IAM & Automation Engineer | Kyndryl [Start Date] – [End Date]

Automation & Security Engineering:

• Security & Audit Automation (Ansible): Engineered Ansible playbooks to automate the extraction of user account lists and server access data across Linux/Windows/as400/solaris systems. Impact: Eliminated manual data gathering for User Access Revalidation, significantly reducing security audit preparation time.
• Collaborated with cross-functional teams to achieve project goals on time and within budget.
• Improved customer satisfaction rates through proactive problem-solving and efficient complaint resolution.
• Followed all company policies and procedures to deliver quality work.
• RPA Implementation: Spearheaded the design and deployment of Automation Anywhere bots for critical banking systems, automating routine ITSM ticket resolutions and reducing manual operational workload by 30%.

Identity & Access Operations:

• Core IAM Administration: Managed end-to-end User Lifecycle (JML) and access controls for banking clients, ensuring strict adherence to Least Privilege and regulatory compliance.
• Cross-Platform Support: Acted as the technical lead for user management on Active Directory, Linux, AIX, AS400, and SQL/Oracle platforms.
• Incident Management: Provided 24/7 On-Call support for critical security incidents, resolving complex authentication issues to maintain high system availability.

IAM Engineer | Softinsa

• Identity Lifecycle Management: Orchestrated end-to-end user lifecycles (Joiners, Movers, Leavers), ensuring secure provisioning and deprovisioning across Active Directory, Linux, AIX, AS400, and SQL/Oracle environments.
• Scripting & Optimization: Developed PowerShell automation solutions for AD management and SQL data extraction to streamline audit reporting and compliance checks.
• Governance & Compliance: Conducted periodic Access Recertification campaigns to validate entitlements and enforce the Least Privilege principle.
• Incident Response: Provided L2/L3 support and 24/7 On-Call resolution for critical identity and security incidents, ensuring business continuity.