Skip to content
Abhimanyu Neupane
Abhimanyu Neupane

I work on privileged access at BMO: the admin and service accounts that would do the most damage in the wrong hands. Before that I ran CyberArk for more than ten banks in Nepal and spent a summer on forensic investigations.

LinkedIn Contact
Security profileMonitored
Identity
a.neupane
Role
Cybersecurity Analyst · PAM Specialist
Domains
PAMNetwork securityIdentityForensics
Credentials
PAM-DEFPCNSAAZ-900FCACPC-SEN
Last change
May 18, 2024, new write-up
Telemetry
Logged, recorded and audited
Access by requestConnect

Experience

  1. PAM Analyst

    BMO Financial Group · Barrie, ON

    CurrentMay 2025 – Present

  2. Cyber Forensic Analyst, co-op

    BMO Financial Group · Barrie, ON

    May 2024 – Aug 2024

  3. Customer Success Engineer, Network & Security

    Digital Network Solution · Kathmandu, Nepal

    Sep 2022 – Aug 2023

  4. Senior IT Assistant

    Manjushree Finance · Kathmandu, Nepal

    Aug 2020 – Sep 2022

Writing

Step-by-step notes from real security work: privileged access, firewalls and VPNs, Active Directory and PKI.

All 5 posts
Network3 min read

LDAP Authentication on SSL VPN with FortiGate

Back FortiGate SSL VPN logins with Active Directory: add the LDAP server, import users, map a group to a portal and write the firewall policy.

Read the write-up

What I work on

Privileged access management

Hands-on across CyberArk Vault, CPM, PSM and PTA: onboarding accounts, rotating credentials, and building custom AutoIt PSM connectors so admin sessions stay isolated and recorded.

Network & identity security

Site-to-site VPNs on Palo Alto, LDAP-backed SSL VPN on FortiGate, Active Directory migrations and PKI, all documented in my write-ups.

Forensics & incident response

Tracing what happened after the fact: log analysis, digital forensics and following privileged activity back to its source.

Tools I use

Privileged access
CyberArk VaultCPMPVWAPSMPSMPPTAAutoIt
Detection & forensics
SplunkCrowdStrikeWazuhNessusAutopsyFTK ImagerEnCase
Network & systems
Palo AltoFortiGateActive DirectoryGroup PolicyWindows ServerLinuxVMware ESX
Day to day
ServiceNowJiraConfluencePowerShell

About

I started in IT support at a finance company in Kathmandu, patching servers, running the Windows domain and writing the guides that kept the same tickets from coming back. CyberArk became the job at Digital Network Solution. I installed and supported it for more than ten banks, wired up CPM, PVWA, PSM and PTA against everything from Windows to iSeries, wrote PSM connectors in AutoIt, and took the calls when production broke. In 2023 I moved to Canada for the Cybersecurity graduate certificate at Georgian College, spent a co-op term doing forensic work at BMO, and then went back to privileged access full time. The posts here are the notes I wanted when I was stuck on something.

Based in
Barrie, ON

Certifications

  • CyberArk Defender – PAMCyberArkPAM-DEF
  • Palo Alto Networks Certified Network Security AdministratorPalo Alto NetworksPCNSA
  • Azure FundamentalsMicrosoftAZ-900
  • Fortinet Certified Associate, CybersecurityFortinetFCA
  • CyberArk Sentry – Privilege Cloud (in progress)CyberArkCPC-SEN

Education

  • Project Management, Graduate CertificateGeorgian College2024 – 2025
  • Cybersecurity, Graduate CertificateGeorgian College · Dean's List2023 – 2024
  • Bachelor of Computer ScienceIUKL · Ran cybersecurity awareness sessions at more than ten high schools2018 – 2022

Request access.

Questions about a write-up, a security project or an opportunity? I read every message.

Message me on LinkedIn