Павло

PAVLO USTYMENKO
Cybersecurity Engineer
Kyiv, Ukraine | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section)

Professional Summary
Cybersecurity engineer with banking experience in security platform implementation, recovery, monitoring and
incident response. Hands-on work with privileged access, MFA, identity governance, endpoint protection, network
security and vulnerability management. Developed 40+ HTML-based CyberArk web connectors for enterprise
systems.

Technical Skills
Security operations: SIEM event analysis, incident response, vulnerability management, access reviews, security
monitoring and service recovery.
Identity and privileged access: CyberArk, Passwordstate, MFA, user administration, identity governance
connectors, workflows and troubleshooting.
Security platforms: IBM Guardium, Symantec DLP, Illumio, McAfee/Trellix, Radware, Tufin, F5 BIG-IP, Qualys and
Venafi.
Infrastructure: Windows Server, Active Directory, Microsoft Entra ID, Azure Conditional Access; Kafka message
analysis and Elastic administration, roles and troubleshooting.

Professional Experience
UKRSIBBANK BNP Paribas Group | 2024 - Present
Lead Cybersecurity Engineer L3
Implement security platforms and restore service availability following failures; monitor system data and
investigate incidents.
Developed 40+ HTML-based web connectors for CyberArk, covering enterprise systems including Ansible, Cisco
and Verint.
Implemented CyberArk, an in-house anti-fraud platform, Venafi and Moodle.
Administer MFA and identity governance platforms: user management, updates, recovery, connectors, access
reviews and workflows.
Investigate SIEM events and support incident response; maintain endpoint protection, data protection and
privileged access controls.
Review firewall and WAF policies, investigate blocked traffic, and use Qualys findings to support vulnerability
remediation.
Troubleshoot Kafka messaging and an application using Elastic; administer Elastic roles and resolve operational
issues.

Quipu GmbH Representative Office | 2021 - 2024
System Administrator L1-L2 | Technical lead and mentoring responsibilities
Administered Windows infrastructure, Active Directory, Microsoft Entra ID, Microsoft 365, SCCM, Intune,
application servers, RDP and jump hosts.
Managed Azure Conditional Access, licensing, subscriptions and virtual machines; maintained certificates and
system updates.
Acted as a technical lead and mentor for a team of up to 40 people; helped engineers troubleshoot issues and
personally resolved complex or blocked tasks.
Administered Zscaler and supported Cisco AnyConnect; resolved authentication, network and access incidents.

Earlier Experience
Support.ua | 2019 - 2021
Technical Support Specialist L1-L2
Diagnosed hardware, software, Windows and connectivity issues; handled remote support, service requests in
1C and equipment assessment.
ProCredit Bank | 2018 - 2019
Junior Helpdesk Specialist L1
Supported corporate users, Windows workstations and office applications; assisted with equipment inventory,
deployment and basic account tasks.

Personal Projects
Built a personal infrastructure lab with VLAN segmentation, firewall rules, VPN access, Linux and Windows VMs,
and Zabbix monitoring.

Professional Training
Red Hat System Administration I and II (RH124 / RH134): course completion certificates. Additional training: AZ-104,
MD-102 and Windows Server administration (20740 / 20741 / 20742).

Languages
Ukrainian: native | English: B1