Amrit-Lal Sharma, CISM

CEO

Delhi, India19 yrs 10 mos experience

Key Highlights

Expert in Cybersecurity architecture and cloud security.
Proven track record in managing Azure transformations.
Strong experience in Active Directory and identity management.

Stackforce AI infers this person is a Cybersecurity Architect with expertise in Cloud Security and Identity Management.

Contact

Skills

Core Skills

Cybersecurity ArchitectureCloud SecurityIdentity & Access Management (iam)Active DirectoryWindows Server Management

Other Skills

Secure design reviewsThreat modelingSecurity controls alignmentGovernance forums participationAzure SecurityAzure FirewallAzure ADMicrosoft Defender for CloudRegulatory ComplianceAD supportSolution designForest migration24/7 availability supportWintel operationsAD forest migration

About

…To become a successfully professional by the way of contribution and value Addition for organization not individually, but by taking everyone along me in the form of a team

Experience

19 yrs 10 mos

Total Experience

1 yr 10 mos

Average Tenure

1 yr 1 mo

Current Experience

Cognizant

Sr. Manager

Apr 2025 – Present · 1 yr 1 mo · Gurugram, Haryana, India · Hybrid

Key responsibilities include: • Lead cybersecurity architecture and secure design reviews across enterprise applications, infrastructure, and cloud environments. Define and govern security architecture principles, standards, and baseline controls for cloud-native, hybrid, and on-prem solutions. Perform threat modeling (STRIDE) to identify architectural risks early in the SDLC and recommend mitigation strategies. Align and map security controls with corporate policies and industry frameworks such as NIST CSF, ISO 27001, and CIS Benchmarks. Collaborate with engineering, cloud, and DevOps teams to embed security into Agile and DevSecOps delivery models. Drive risk-based security decisions, participate in governance forums, and manage risk acceptance and exceptions. Develop, maintain, and annually review corporate cybersecurity standards to ensure alignment with evolving threats and compliance needs.

Cybersecurity architectureSecure design reviewsThreat modelingSecurity controls alignmentGovernance forums participationCloud Security

Tata consultancy services

Associate Consultant

Jul 2022 – Apr 2025 · 2 yrs 9 mos · New Delhi, Delhi, India

Worked with Tata Consultancy Services as “Associate Consultant” from 6th July’ 2022 to till date, Gurugram.
Currently working with Cyber Security Primary team as Azure Security Architect.
Working Azure Security Lead, Managing Azure transformation and BAU support for Azure Firewall,Azure AD, Azure B2C, Microsoft Defender for Cloud (Implementing Regulatory Compliance NIST, CIS, Azure Security benchmarks), Defender for Servers (Policies implementations).
ADFS to Azure AD migration.
Preparing HLD and LLD documentations service transformations.
Delivering services with Agile.
Implementing Azure Security Best practices for all Azure workloads.

Azure SecurityAzure FirewallAzure ADMicrosoft Defender for CloudRegulatory ComplianceCloud Security+1

Capgemini engineering

Manager

Aug 2021 – Jun 2022 · 10 mos · India

I was responsible to handle 24*7 availability support for AD, ADFS, AZURE AD, PKI operation support. Working as active member of Global Infra team for solution design and development for forest migration and consolidation.

AD supportSolution designForest migration24/7 availability supportActive DirectoryCloud Security

Jk technosoft limited.

Lead Administrator - Solution Architect

Nov 2019 – Aug 2021 · 1 yr 9 mos · Gurgoan

Working as Operations manager and responsible for 24*7 support availability for Wintel operations.
Working as active member of technology planning team as per market standard for future enhancement.
Active Part of AD forest migration team using Quest tool.
Managing team for Operation L3 support. Supporting more than 10 Domains with more than 150 DCs, 2000 Windows server, Failover Clusters, Storage issue.
Handling AD, ADFS, AD Connect, DHCP, DNS and PKI services for all the Domains.
Migrated from Enterprise Root CA to offline Standalone Root CA.
Migrated all CA servers from Windows Server 2008R2 to Windows server 2016 without any prod outage
Responsible for timely CRL publication of offline Standalone Root CA.
Publish Certificate template publishing along with RBAC permissions to enrollee respective certs.
ADFS upgradation Win 2012 to Win 2016, WID to SQL DB Migration, ADFS Farm Behavior upgradation.
ADFS RP party creations along with claim rule.
Co-ordination with application owner to integrate with ADFS for SSO.
Managing Azure AD. External identity, Azure B2C, Azure B2B. App registration, Enterprise Application registration.
Azure SSO, Enterprise application registration with SAML, OAuth2.0, OpenID.
Azure log analytics. Azure identity governance and Administration.
Incident Management, Change Management and Problem Management
Security vulnerabilities assessment and remediation and Active directory security posturing with ALSID, OAADS and ping Castle, maintaining more than 95% security compliance.
Maintaining CIS (Center of Internet Security) benchmark.

Wintel operationsAD forest migrationOperation L3 supportSecurity complianceActive DirectoryCloud Security

Wipro limited

Lead Administrator

May 2019 – Nov 2019 · 6 mos · Mysore

Lead administrator handling AD, ADFS and Wintel infrastructure for 40+ clients.

AD supportWintel infrastructureClient managementActive DirectoryCloud Security

Hcl technologies

Technical Specialist

Apr 2016 – May 2019 · 3 yrs 1 mo · Noida

Project:-JTI (Japan Tabaco International).
Role: Active Directory, ADFS, Azure AD, AD Connect, DHCP Services, NPS Services
Responsibilities:
Implementing & configuring Active directory services on Windows 2012 and 2016 server.
Active Directory migration from Windows server 2012 to Windows server 2106.
Monitor “Service Now” queues for requests, incidents and changes (resolve as needed)
Creating & managing Origination Units, Sites and Group policies.
Monitoring ADFS 2.0/ 3.0 servers, Creating new Relaying parties in ADFS.
Monitoring FIM alerts and warnings. Handling Delta Sync, Full Sync
Monitoring AD Connect Sync, warning and alerts. AAD monitoring.
Configuring & troubleshooting DHCP server and DHCP relay agent and WINS services.
Resolve escalated problems experienced from the service. Investigate root cause for incidents and participate in delivering corrective action. Escalate to Sr. technical staff as required
Takes part in team meetings as well as other meetings with other teams, departments, or clients as needed
Perform lab tasks as requested
Miscellaneous items as requested from team lead and management
Patching & Security remediation for AD /ADFS, FIM and DHCP server activities as needed

Active DirectoryADFSAzure ADDHCP ServicesCloud Security

Future focus infotech private limited

Windows Administrator

Nov 2013 – Apr 2016 · 2 yrs 5 mos

Key Responsibilities: -
Installation and troubleshooting Windows Server 2003, 2008, 2008R2 Server.
Handling total 500 Servers in DC and DR.
Implement and troubleshooting Domain Controllers, Additional Domain Controllers,
o Create database in Active Directory, applying Group Policies.
Managing Domain Controller, Additional Domain Controller.
Handling Microsoft Exchange Server 2010, 2013 (Creating mailbox, applying routing policy, OAB, DAG, Mailbox Databases, Queue Viewer).
Monitor Exchange backups. Make sure that backups complete under service level agreements (SLA).
Check disks with transaction log files. Check disks with SMTP queues. Use server monitors to check free disk space on all exchange mailbox servers.
Looks after event viewer and troubleshoot the warning and critical events on daily bases.
Administering and managing nearly 10,000 Lync users
Assisted in the Architecture, design and implementation for the Lync environment.
Served as a L2+ escalation point for problem and resolution associated with Lync client and server issue.
Cumulative update installation to the Lync Server 2010 and 2013 infrastructure.
Monitored and addressed trouble tickets and service requests submitted to the Lync Team.
Provide operational support and troubleshooting of Lync infrastructures
Server Health Monitoring on daily bases.
Configuration and troubleshooting TMG (Threat Management Gateway) 2010.
Handling Failover Clusters of Exchange Server, LDAP Server, DNS Server, Anti Virus Server etc.
Handling Server Backup and restore.

Windows ServerActive DirectoryExchange ServerLync administrationWindows Server Management

Flexisit india

Sr. System Engineer

Apr 2013 – Aug 2013 · 4 mos · New Delhi Area, India

Key Responsibilities: -
Installation & configuration of Windows 2003 and Windows server 2008
Working with Active Directory Domain Services , Working with DNS and DHCP Configuration & troubleshooting
Monitoring with the help of N-Able, LabTech, Packet Trap, GFI, Kaseya - Monitoring tools.

Windows ServerActive DirectoryDNS and DHCP configurationWindows Server Management

Pal business systems

Executive Engineer

Nov 2012 – Mar 2013 · 4 mos · New Delhi Area, India

21 Nov’ 2012 To 26th March’ 2013 with PAL Business System, Delhi.
Site: - ExpertServ Ltd., Gurgaon as an Executive Engineer…
Key Responsibilities: -
Installation troubleshooting Windows 2008R2 server.
Implement and troubleshooting Domain Controllers, Additional Domain Controllers,
o Create database in Active Directory, applying Group Policies.
Installation and troubleshooting DHCP Server, DNS Server, FTP Server, Print Server.
Handling day to day user INC and queries.

Windows ServerActive DirectoryDHCP and DNSWindows Server Management

Igate ims ltd

Desktop & Networking Engineer

Oct 2007 – Oct 2012 · 5 yrs · Karnal Area, India

Key Deliverables
Spearheading 1 Reliance City Office, 2 Reliance MCN, 3 Reliance Web Worlds using Cisco 3700, 3600 / 2610 / 1700 / 800 series routers & Nortel Layer 3 1442T and Cisco 2950 switches.
Handling the ATM project of PNB in Haryana & providing connectivity through Cisco router 800 series & FWP.
Maintaining WAN connectivity through ISDN Line, V-SAT & optical fiber cable using VLAN, Multilink.
Responsible for vendor management and network troubleshooting on LAN & WAN.
Rendering technical support to the users for Lotus 6.5, 7.0 & 8.5, SAP & other application software.
Accountable for Remedy Helpdesk Management along with Asset Management using REMEDY.
Implement and troubleshooting Domain Controllers, Additional Domain Controllers,
o Create database in Active Directory, applying Group Policies.
Installation and troubleshooting DHCP Server, DNS Server, FTP Server, Print Server.
Providing support to users related Desktops, Laptops and network printers.
NAT configuration.
ACL Configurations.