Brad Herrington

Remote | United States

CloudCrafted.dev

Get-PrivilegedLogic

Professional Summary

Senior CyberArk Engineer | IAM Specialist | Cloud Computing Candidate (WGU) Certified CyberArk Sentry & Defender professional with 15+ years of experience designing and implementing secure identity and access management solutions. Proven success in automating privileged access, deploying enterprise CyberArk environments, and supporting large-scale infrastructure initiatives. Currently pursuing a B.S. in Cloud Computing and expanding cloud expertise through AWS certification and hands-on infrastructure work

Technical Skills

CyberArk: Sentry & Defender Certified | PAS Suite | CPM | PVWA | PSM | PACLI | REST API | Alero | Vault Admin | Safe Management | Onboarding Automation

Scripting & Automation: PowerShell | Bash | Python (basic) | CLI Tools | Scheduled Task Automation | Reporting Scripts

Cloud & Infrastructure: AWS (IAM, EC2, S3, CloudWatch) | Windows Server 2012–2019 | Active Directory | DNS | Group Policy | SSL/TLS | VMware | GovCloud (AWS)

Security & IAM: Privileged Access Management (PAM) | Identity Lifecycle | Access Reviews | Vulnerability Scanning | Firewall Segmentation | Network Hardening

Professional Experience

Lockheed Martin
  • Streamlined and reduced 5+ years of legacy CPM rule sets, improving CyberArk performance and reducing system overhead.
  • Developed a PowerShell script to update Vault Admin permissions across 7,500+ safes, improving audit readiness and consistency.
  • Issued 60+ certificates for vulnerability scanners to meet evolving corporate security policy requirements.
  • Supported PassM migration from Denver to Dallas data center, ensuring system continuity and minimal downtime.
  • Conducted safes audit across Windows platforms, identifying misallocated entries and optimizing password automation coverage.
  • Remediated critical security vulnerability in PassM, enhancing protection against unauthorized access.
  • Led feasibility study for migrating PassM to AWS GovCloud; identified key cost benefits and technical constraints.
Cybersheath
  • Led CyberArk deployments and upgrades for clients including Goodyear, PSEG, and PacSun/Eddie Bauer.
  • Delivered project documentation and aligned solutions with client-specific IAM strategies.
  • Spearheaded the Oracle Account onboarding project, providing critical access management of SYS and SYSTEM accounts.
  • Implemented Postgres account management into CyberArk, extending privileged account governance across modern DB platforms.
TEKsystems @ Wells Fargo
  • Managed privileged access lifecycle for Oracle DB accounts using CyberArk, ensuring secure onboarding and rotation.
Commercium Technology Inc.
  • Implemented CyberArk deployments and upgrades for Morgan Stanley and Dartmouth Hitchcock across enterprise environments.
Identropy
  • Deployed CyberArk for Windows, Unix, and supplemental accounts to improve privileged access governance.
Optiv Security @ Anheuser-Busch
  • Built CyberArk architecture for 150+ Domain Admin and 200+ Linux accounts across 25+ domains and 7 zones.
  • Conducted Linux onboarding, ensuring the secure and efficient management of Root and six other privileged accounts spanning multiple business units.
  • Streamlined CyberArk administrative tasks by developing and maintaining PowerShell scripts, increasing efficiency and reducing manual errors.
  • Implemented a WSUS server to remediate security risks associated with the Vault, reducing the risk of potential exploitation.
TEKsystems @ Deutsche Bank
  • Served as lead U.S. POC for CyberArk; handled patching, bulk onboarding, and automation via PACLI.

Certifications

  • CyberArk Sentry Certification
  • CyberArk Defender Certification
  • AWS Certified Cloud Practitioner
  • CompTIA A+ Certification
  • CompTIA Network+ Certification
  • CompTIA Security+ Certification
  • CyberArk Alero Remote Access Certification
  • ITIL 4 Foundations by PeopleCert
  • LPI Linux Essentials

Education

Bachelor of Science, Cloud Computing (Expected Dec 2025), Western Governors University (WGU)

Contact Me

Got an opportunity or question? Send me a message using the form below and I'll get back to you as soon as possible.

Visitor Count: Loading...