IAM DevOps engineer / business analyse / test management / test execution

9/2017 – 12/2019

With APG asset management I have implemented applications of an integrated, complex and varied landscape into RSA’s Identity Access Management tool. Access was defined in accordance with a QA framework in cooperation with the business and certified by information risk security in line with ISAE standard. Access was provided and maintained by role based access control with a hierarchy of business and technical roles consisting of application entitlements. The IAM configuration was configured with realtime alerts in case of violations based on SIEM guide lines, segregation of duties and geographical location. Initially I coordinated the collection of authorization which scoped technologies like Linux FreeIPA, Windows AD, Oracle and SQL databases, application specific authorizations were collected through tailor-made queries.
Together with business analysis I have guided the specification of the authorization matrices, the base for RBAC and I have supported reviews by risk. After the implementation I supported IAM application management in fine tuning the configuration to be fit for purpose. Due to the implemented work flows changes were always fed back to business and actively required their approvals. Role management workflows were defined and supported continuous integration of new applications or configuration updates in an agile work environment.

DevOps (allg.), Application Lifecycle Management

7/2015 – 9/2017

The environment management role contained responsibilities regarding configuration of infrastructure, integration alignment, operational excellence, logical access control and application lifecycle management.
I was the link between the business project and the ICT organization: project requirements were defined and translated into ICT actions. I coordinated the requirement gathering and the implementation of ICT actions for DEV, FIT and UAT. Static and test data refreshes were managed based on test and business requirements. Run books for both infrastructure and data refreshes were designed and managed in accordance with APG governance and executed to guarantee operational environments and continuation of test phases aligned with release management. Releases were composed based on stakeholders input and managed through the development and test life cycles taking care of version control and timely deployments into production.
I coordinated deployments once acceptance criteria were met from test and acceptance level perspective, activities included an official hand over to the application managers.
Beside environment management and software deployment coordination I was also involved in logical access control in cooperation with Quality Assurance which eventually led to my last role for Identity Access Management.

Release-Management, Test Management, Infrastrukturarchitektur

1/2015 – 5/2015

I have managed various test levels for the period of one release for functional integration and user acceptance tests. Test approach was discussed and scoped with system and business analysis and business representatives and divided over system and acceptance tests. Test execution was managed based on business value and risk analysis. Stakeholders varied from project, release management, the business to actuaries. During the test execution phase I coordinated the tests, managed the defects, communicated the progress and risks to all stakeholders both onsite and off shore and chased formal approvals.
Feed back from stakeholders and current requirements were regularly discussed to deliver a product which met the latest acceptance criteria.
During the test phase I maintained regular contact with external developers and testers in India, the project team and the end users.
Requirements were met and the implementation was handed over successfully and in accordance with the release management agenda.

Test Management, Technisches Testdesign