Darsh Kapadia

Co-Terminal MAS in Cyber Forensics & Security GPA 4.00

BS in Applied Cyber Security & Information Technology GPA 3.96

GE HealthCare — Waukesha, WI

• Automated CyberArk Privilege Cloud onboarding, safe provisioning, role assignments, and license management using REST APIs, Python, Bash, and PowerShell, improving operational efficiency by 25× and saving $200K+ annually in licensing costs.
• Integrated several thousand high-risk Ansible and SOX accounts into CyberArk, strengthening privileged access controls and aligning with compliance standards.
• Authored comprehensive technical documentation and SOPs for identity security processes, facilitating knowledge transfer and operational consistency.
• Administered core IAM services, resolving ServiceNow tickets for access provisioning, identity lifecycle management, and security incidents.

Sanskriti — Illinois  ·  Volunteer

• Administer Google Workspace (provisioning, access control, and security) for a 50-member organization, enabling secure collaboration and resource delivery to external sponsors and donors.
• Develop and maintain website, e-commerce platform, and integrations, raising $50K+ in non-profit donations over two years.

Valley View School District — Illinois

• Streamlined device provisioning and access management for 3,600+ users using Google Admin Console, Okta LDAP, and custom automation to enforce access controls.

• Secured a full-stack home network with OPNsense (DHCP, DNS, Firewall, VPN, IDS/IPS) and Wazuh SIEM/XDR; enforced identity-aware access using Authentik IdP and Cloudflare Zero Trust.
• Managed Proxmox and Docker environments with reverse proxies, hosting containerized applications and smart devices via Home Assistant.
• Performed red/blue team exercises with Kali, Nmap, Metasploit, Burp Suite, and forensic analysis using Autopsy, Volatility, FTK Imager; hosted redundant services on AWS, Azure, and GCP.

• Discovered a critical access control misconfiguration in Illinois Tech's Navigate360 portal exposing sensitive PII and the entire student body's academic records.
• Documented a high-impact (FERPA) vulnerability and followed responsible disclosure procedures by reporting directly to institutional leadership, leading to remediation.

• Reverse-engineered CBORD CS Access app's private HTTPS API with Burp Suite to map authentication flows and endpoints.
• Built a Python microservice (Docker-deployed) exposing a simplified REST API for voice-activated door control via Siri.

• Developed a Python-based Discord bot integrating with the Proxmox REST API for VM lifecycle management and real-time server monitoring.
• Automated idle-shutdown logic to reduce resource usage and created a secure, permission-based self-service portal for users.