Muhammad Umer

Supporting FERPA regulated systems across the largest U.S. school district (900K students, 1,800+ schools)

• Administered identity and access management (IAM) across IBM ISIM, ISV, RACF, and Active Directory, including user provisioning and deprovisioning, MFA enrollment and resets, group membership validation, RBAC administration, access controls, and identity governance processes, enforcing least-privilege and zero-trust principles.
• Secured privileged access management (PAM) for IBM mainframe applications via IBM RACF, supporting account lifecycle operations and security policy enforcement for enterprise-scale environments.
• Handled compromised account incident response by collecting access history, verifying account exposure, initiating emergency credential resets, and escalating security findings to Tier 2/3 teams with documented triage notes.
• Maintained enterprise network and endpoint connectivity across 1,800+ distributed sites by troubleshooting VPN, VLAN, DNS, DHCP, TCP/IP, wireless access points, internet routing, and Azure Virtual Desktop environments using ping testing and IP verification.
• Managed incident lifecycles in ServiceNow across account management, network connectivity, email, hardware, and application categories while maintaining SLA compliance and authoring knowledge base documentation that reduced repeat ticket volume.
• Supported First Day of School surge operations during the district's peak demand period, maintaining SLA performance and access continuity as thousands of returning staff and students generated concurrent authentication and provisioning requests.

AWS, Terraform, Python, GitHub Actions: Deployed a serverless resume site with S3 locked behind CloudFront Origin Access Control, a least-privilege Lambda IAM execution role scoped to a single DynamoDB table, and a dedicated least-privilege CI/CD IAM user, limiting blast radius of any leaked credential to website assets only. HTTPS enforced end to end, infrastructure defined entirely in Terraform, automated deployment via GitHub Actions CI/CD.

Terraform, AWS IAM, Access Analyzer, AWS CLI, Python: Remediated 5 simulated AWS IAM privilege-escalation and misconfiguration vulnerabilities, addressing issues from account-wide wildcard access to resource-scoped least privilege, validated via CLI policy audits and Lambda proof-of-concept testing, by deploying dual Terraform environments across IAM, S3, DynamoDB, EC2, and Lambda.

AWS, EC2, CloudWatch: Deployed EC2 instances with CloudWatch monitoring and alerting, demonstrating hands-on cloud infrastructure operations and observability configuration.