Kavitha K J, CISSP

Experience

• 

  L&T Infotech

  Jan 2003 - Jan 2008

  Development Team Lead

  -> Responsible for delivery of Java/J2EE projects in networking domain in Hitachi client-> Started as software engineer trainee and built skills to lead teams

• 

  RBS

  Jul 2010 - Sept 2013

  Software Designer

  -> Application designer with experience in designing , coding and testing Java/J2EE projects in Authentication and Authorization projects.

• 

  IBM India Private Limited

  Nov 2014 - Dec 2015

  Application Developer

  -> Senior application designer with networking client AT&T.-> Experience in designing , coding and testing Java/J2EE projects through devops methodology and agile scrum framework.

• 

  NatWest Group

  Dec 2015 - now

  Lead change programs in Colleague Access Management, privileged access management and Machine identity management in Security function, facilitating strategic initiatives, budgets, program level processes and execution, driving continuous innovation and operational efficiency.-> Building, enabling and empowering feature teams to drive key security outcomes -> Delivered certificate management automation platform at pace, for the technology customers to be on-boarded for enrollment and provisioning, contributing to improving the security control posture as well as resulting in huge operational efficiencies for the group. My knowledge on enterprise infrastructure, dev-ops and cloud and identity and access management helped in resolving impediments in design, integration, deployment and implementation. My contribution included designing the end to end road-map of features for certificate automation as a product owner owning the backlog and prioritizing it, improving collaboration with technology customers , connecting infrastructure stakeholders, vendor/stakeholder management , overall change governance and program management. Received excellent feedback from colleagues across the program for my security knowledge, program alignment and pace. -> Delivered end of life product upgrade for secrets management platform. Provided multiple design options to upgrade infrastructure with minimal customer impact. Reviewing risks of the upgrade approach with the vendor, worst case impact analysis, change governance, stakeholder management were some of my work in this program. I also manage security apprentices and graduate engineers to support their development in the bank. This is a learning experience for me helping apprentices and new graduates to settle down in the bank. Show less -> Contribute to robust Machine Identity Management strategy for the bank delivering focussed and future proof cryptography services. -> Manage and govern the complete lifecycle of machine identities (digital certificates and keys) from deployment through revocation or renewal. -> Manage the roadmap and strategy for secrets management as product owner of vault. Machine identity management is essential for data security, integrity, and compliance, as it authenticates communicating parties and ensures all traffic is encrypted.-> Service manager of cryptography Show less -> Platform owner of IAM solution for markets and global engineering lead to drive engineering transformation in security services-> Led the digital transformation of the IAM , PAM functions to maximize value to business-> Build access management engineering function from scratch to a 100+ members-> Agile release train engineer professional leading the release train for multiple agile scrum teams to deliver value-> Led and empowered the transformation of the culture towards agility, self-organisation and innovation-> Established a clear operating rhythm around the new agile ways of working -> Served as product owner in data and IAM services delivering descriptive analytics and predictive analytics through data aggregation and Neo4j graphs driving the right behaviours for stakeholders to take the right decisions. -> Avid advocate of dev-sec-ops automation embedding security first mindset, quality assurance and automation tooling in the CI/CD journey of the systems-> Contributed technology expertise to the microservices / API designs, cloud patterns and User interface redesigns -> Led active hiring and built the engineering capability in the team-> Led the vendor engagements, finance management and program management Show less -> Sailpoint IIQ platform owner in the bank-> Responsible for change and run aspects of Identity and access management solutions for privileged accounts and staff -> Executing projects in Robotic process automation, Tableau , Neo4j through Devops and SAFe framework-> Deployed digital bots to automate business processes resulting saving thousands of person hours-> Built self-service dashboards in Tableau driving security controls -> Deployed graph visuals for enabling security controls in identity and access management policies-> Supporting Cyberark, Guardium and cryptography services-> Transforming services and bringing operational efficiency through automation-> Lead CSR Initiatives across India Show less

  • Release Train Manager(Change Lead)

    Jul 2023 - now

  • Security Service Manager

    Nov 2022 - Jun 2023

  • Release Train Manager(Global Engineering Lead)

    Dec 2021 - Nov 2022

  • Project Development Manager(IAM Platform Owner)

    Dec 2015 - Dec 2021