• 👋 Hi, I’m @josephjsilva
• 👀 I’m interested in IAM, AI, Threat Analysis, Threat Hunting, Automation
• 🌱 I’m currently learning AI Vulnerability Analysis, Threat Hunting, Automation with Python
• 💞️ I’m looking to collaborate on Automation with Python
• 📫 How to reach me https://www.linkedin.com/in/josephjsilva/

Strategic, multi-faceted, process-oriented Information Security Leader with a proven track record of identifying and remediating security and compliance gaps in Information Technology, Information Security, and Artificial Intelligence systems. I lead initiatives that enhance organizational security, compliance, and productivity, and develop key processes, policies, and standards to mitigate risk and drive innovation, automation, and efficiency across the organization.

IAM Consultant
Apr 2025 – Present

• Providing IAM consulting and identity risk analysis to a global client. Guiding best practices for persona development. Conducting workshops for role-mining and privilege access assessments.
• Cataloguing job junctions and application roles and permissions. Creating and documenting role mapping processes for IAM analysts.
• Acting as subject matter expert for IAM and IGA process and procedures including implementation of RBAC, ABAC, and ReBAC models.
• Consulting with security leadership team on persona development, identity governance, and insider threat assessment.

IT Director Data & GRC
Jan 2023 – Dec 2024

• Oversight of cybersecurity program and guidance for IT teams in compliance with security controls.
• Architected and designed a master data model and a persona-based identity model for entitlement.
• Ensured compliance with CCPA/CPRA and PCI-DSS, and led incident response initiatives.

Core Accomplishments:

• Implemented new regulatory and incident response plans.
• Led the successful migration to Microsoft Authenticator based MFA.
• Redesigned user lifecycle policies and security controls, reducing error rates and identity management risks.

HRIS and IAM Manager
Jan 2016 – Dec 2022

• Supported HR systems, managed employee data and Identity Automation.
• Implemented multifactor authentication and automated provisioning.
• Provided advanced technical support to IT, HR, and Accounting teams.

Core Accomplishments:

• Implemented a new Human Capital Management (HCM) system in less than 5 months.
• Integrated several employee-related third-party vendors with Enterprise SSO and Federation.

Applications Manager
Apr 2011 – Dec 2015

• Provided technical and business process support for HR and IT departments.
• Managed relationships with HR-related vendors and integrated key projects.

Core Accomplishments:

• Automated identity synchronization with Active Directory.
• Led RFP processes and implementation projects for new HCM systems.

Sr. Applications Developer
Jun 2008 – Mar 2011

• Developed custom solutions for Accounting, Human Resources, and Operations.
• Administered key billing, databases, Datawarehouse, and reporting systems.

Consultant, Self-Employed
2005 – 2008

• Provided technical consulting services, including systems architecture and implementation for B2B clients.

IT Director
2004 – 2005

• Managed IT and systems for Boudin, including installation of Audio/Visual systems, POS, and network systems.

Director of Operations
Mar 2003 – Mar 2004

• Directed operations for a business telecom and networking company.

IT Director
Jan 2000 – Mar 2003

• Managed IT operations and special projects with a focus on service delivery and application management.

• WGU Information Technology Management B.S.
• Certifications:
  • ISC2 Certified Information Systems Security Professional (CISSP)
  • ISC2 Certified Cloud Security Professional (CCSP)
  • Certified Identity and Access Manager (CIAM)
  • Google Cloud Digital Leader
  • Google Cloud Professional Cloud Architect
  • AWS Certified Cloud Practitioner
  • CompTIA SecurityX, CySA+, Security+, PenTest+, Project+, Network+, A+
  • ITIL 4 Foundation
  • LPI Linux certified
  • ServiceNow Certified Developer

• Azure EntraID Administration
• Microsoft M365
• Azure Administration
• AWS Administration
• Dell ARS Sync for Active Directory Automation
• SecureAuth & Duo Identity Provider (IdP)
• ServiceNow (ITSM)
• Dell Boomi Automation
• Human Capital Management (HCM)
• Learning Management Systems (LMS)
• Basic Forensics (Autopsy)
• Microsoft SQL
• Bocce (fluent)

• Home lab with "Wazuh - Open Source XDR, SIEM" and setup VMs to test Nessus scans.