Narendra Kumar Vishwakarma

Cloud & Application Security Leadership

• Successfully designed and implemented secure cloud architectures (AWS, Azure, GCP) for large-scale enterprise environments at Fidelity International , ensuring compliance with global standards like GDPR, PCI DSS, and SOX.
• Led the integration of Privileged Access Management (PAM) solutions using tools like CyberArk and BeyondTrust , reducing privileged access risks by implementing robust session management and monitoring controls.

Vulnerability Management & Remediation

• Conducted comprehensive vulnerability assessments and remediation efforts based on OWASP , WASC , CWE , and CVE frameworks, significantly reducing application vulnerabilities during his tenure at Axtria .
• Developed and executed mitigation strategies for critical security gaps identified through SAST, DAST, and container security scans, ensuring alignment with NIST SP 800-53 and OWASP ASVS standards.

Enterprise Architecture Development

• Played a pivotal role in defining and maintaining the Enterprise Architecture at PricewaterhouseCoopers LLP , aligning business initiatives with IT architecture models to enhance operational efficiency and security.
• Established and maintained cross-functional collaboration between business units and IT teams to ensure seamless adoption of architectural frameworks like TOGAF and CobiT .

Compliance & Risk Management Excellence

• Led PCI DSS compliance projects at Cognizant Technologies Solutions , reducing the scope of assessments and implementing robust security controls for Payment Card Industry compliance.
• Designed and enforced Identity Governance & Compliance frameworks for cloud environments, ensuring adherence to regulatory standards such as GDPR , SOX , and FedRAMP .

Security Architecture Design & Implementation

• Architected advanced security solutions for PKI , MFA , and Web Application Firewalls (WAF) at Cognizant , enhancing protection against sophisticated cyber threats.
• Designed and implemented secure API management and microservices security policies, ensuring robust authentication and communication mechanisms for cloud-native applications.

Incident Response & Disaster Recovery

• Developed and executed Incident Response Plans and Disaster Recovery Strategies for cloud environments, minimizing downtime and ensuring business continuity during security incidents.
• Integrated PAM with cloud security tools to enhance incident response processes and protect multi-cloud environments from unauthorized access.

Technical Expertise & Tool Mastery

• Leveraged advanced security tools like Wireshark , Nmap , Burp Suite , ZAP , and Kali Linux to perform network and web application vulnerability assessments, ensuring proactive threat detection and mitigation.
• Configured and managed firewalls, proxies, and load balancers (e.g., F5 , Riverbed , Citrix NetScaler ) to optimize performance while maintaining high security standards.

Training & Awareness Programs

• Conducted training sessions on Application Security , DevSecOps , and CI/CD Pipeline Security , fostering a culture of security awareness and best practices among development and operations teams.
• Delivered workshops on emerging security trends, including cloud security , container security , and threat modeling , empowering teams to address modern cyber risks effectively.

Data Center Migration & Cloud Hosting Solutions

• Successfully led data center migrations to cloud platforms like VMware , Microsoft Azure , and Amazon AWS , ensuring minimal disruption and enhanced security for critical business operations.
• Designed and implemented shared and private cloud hosting solutions, optimizing resource utilization and cost efficiency while maintaining compliance with security standards.

Global Security Consulting & Threat Mitigation

• Provided expert security consulting services to global clients at British Telecom , Ricoh , and Tmen System , developing tailored strategies to mitigate risks from advanced persistent threats (APTs) and malware attacks.
• Created System Security Plans (SSP) for organizations, establishing frameworks for threat mitigation, risk assessment, and continuous security monitoring.

Automation & DevSecOps Integration

• Implemented CI/CD pipeline security practices and automated security testing tools to integrate security into the software development lifecycle (SDLC), reducing vulnerabilities in production environments.
• Championed the use of container security tools like Docker Bench for continuous monitoring and image scanning, ensuring secure deployment of containerized applications.

Recognition & Certifications

• Earned prestigious certifications such as Certified Information Security Manager (CISM) , AWS Certified Security – Specialty , and Check Point Certified Security Expert (CCSE) , showcasing his commitment to professional excellence.
• Recognized for his leadership in security architecture and risk management, contributing to the successful delivery of high-impact projects across multiple organizations.

Strategic Contributions to Business Growth

• Collaborated with senior management to develop strategic security roadmaps that aligned with business goals, driving innovation while safeguarding critical assets.
• Played a key role in mergers, acquisitions, and transitions, conducting security assessments and designing architectures to ensure seamless integration and compliance.