SUMMARY:

• Over 8+ years of experience in Identity & Access Management using ISIM, ISAM, TFIM, TDI.
• Experience in configuring and developing identity and access management solutions for enterprise applications
• Intense knowledge in planning, design, implementation and administration of medium and Confidential - Business and Integration Infrastructures
• Migration Experience ITIM 5.1 to ISIM v6.0, TAM 6.1 to ISAM 8.
• Confidential Security Access Manager: Perform ISAM Appliance configuration, implement web single sign on; Command line configuration; Managing ACLs and POPs.
• Confidential Security Identity Manager: Install ISIM server software; Organization structure, Services and Entities design creation; Provisioning policies design creation; Workflow design creation; Identity design creation, Life Cycle Rules, Recertification policies.
• Confidential Federated Identity Manager: Install TFIM 6.2, Configured Domain, Federation and added SAML 2.0 federation partners
• Excellent Enhancements, Troubleshooting and Support Skills of ITIM, ITAM, ISAM and its Inter dependent components (like Confidential Tivoli Directory Server, Confidential Tivoli Directory Integrator, Confidential HTTP Server, Web SEAL Server and Policy Server).
• Hands on experience on Confidential DB2 Administration.
• Strong experience in script writing (UNIX shell scripts, Perl scripting).
• Sound knowledge in SDLC methodologies like Waterfall Model and Agile.
• Groomed newly joined team members according to the project requirements and environment.
• Good analytical, leadership skills, fast learner and is adaptive to new environments.
• Extensively worked on OIM Connectors like Active Directory, ED, RSA, OID, OIF, Database User Management and Flat File.
• Working on the Identity Management service to enable client applications to manage identities such as users and roles.
• Involved in end-to-end implementation of IAM solution using Oracle's suite of Identity and Access Management.
• Configured Trusted and Target reconciliation from Oracle internet directory, also performed provisioning into OID and EBS using OIM.
• Installed and configured Oracle E-Business suite, BMC Remedy and MS Exchange 2007 and MS Exchange 2010.
• Proficient in Windows and Linux/Unix based environment setup and good knowledge on Linux commands and Shell scripting.

TECHNICAL SKILLS:

Software: ITIM/ISIM ( Confidential Tivoli/Security Identity Manager), TDS (Tivoli Directory Server), TAM/ISAM (Tivoli Access Manager/Security Access Manager), TFIM (Tivoli Federated Identity Manager), TDI (Tivoli Directory Integrator), MS Office, Eclipse IDE, Windows XP, and 7, Linux (Debian, Ubuntu, RedHat SESU).

Programming Languages: Java, Java scripting and Unix shell scripting, CURL

Databases: DB2 8,9, 10

Operating Systems: UNIX, Linux, and Windows

Other Tools: JIRA, Toad, SQL Developer, Apache Directory Studio, Fiddler, SoapUI, Explorer

PROFESSIONAL EXPERIENCE:

Confidential - Seattle, WA

Sr. IAM Consultant

Responsibilities:

• Integrate applications from development to production, assist development teams in identifying and resolving various issues related to SiteMinder.
• Created Rules, Rule groups, Response, Response groups, Realms and Policies for Directory Server users, implemented SiteMinder policy based security.
• Coordinated with the Service providers and identity providers during the SAML Certificate upgrade and architectural changes.
• Worked with SiteMinder engineering team to document technical specifications and procedures for SiteMinder best practices.
• Implementation of SSO and authentication services using CA Netegrity SiteMinder.
• Responsible in Performance Tuning for SiteMinder to provide better response time, low latency, high availability and maximum throughput.
• Proxy service protection for internal Web infrastructure by providing SSL, fault tolerance and load balancing.
• Assist load testing team during load tests.
• Prepare project plan and submit weekly progress reports, throughout the project duration.
• Provided roll-back plans to all application teams when any issue.
• Supported endurance and regression testing in pre-production environment.
• Involved in daily Site minder updates for Production, UAT and Development environment.
• Assisted multiple applications during any production outage.
• Handled multiple alerts related to servers in various environments.
• Assisted Infrastructure Team during any changes.

Environment: CA SiteMinder R12 SP3, Sun Solaris 9/10, Windows Server 2003, SunOne Directory Server, IIS 6.0, Apache 2.x, Webserver 6.1, Tomcat 4/5.

Confidential - San Diego, CA

IAM Consultant

Responsibilities:

• Involved in Design Approach for Confidential Security Identity Manager 6.0
• Installation and configuration of ISIM and ISAM
• Prepare documentation for the whole approach process for ISIM 6.0 and ISAM 8 process document for Administration and development
• Configuration and Administration of ISIM and ISAM.
• Configuration and Administration of ITIM- Importing Profiles, Creating Services, create provisioning; implement id policies, password policies, ACI, reconciliation, Workflows etc.
• The role involves interfacing with the direct clients for testing of multiple endpoint identities
• Created ACL, POPs, proxy server and Web SEAL junctions
• Configured single sign on solutions for many applications.
• Monitored applications and WAS performance through performance viewer and tuned the systems- caching, queuing, JVM parameters, DB2 connection pooling.
• Technical Requirement Gathering: was responsible for gathering the user provisioning requirement for all the end points of ISIM
• Provided trouble-shooting and configuration of Web SEAL and all components with-in ISAM
• Acts as a resource for primary contact for vendors in Certification renewals.
• Involved with TFIM team to implement federations via SAML, and WS-FED utilizing Federated Identity manager
• Worked with SAML 1.1, SAML 2.0
• Understanding of Authentication and Authorization protocols such as Kerberos, Certificate, basic, forms-based and multi-factor Authentication etc.
• Development of TDI Assembly for HR Feed Process and Custom Adaptors

Environment: Confidential Security Identity Manager (ISIM V6), Confidential Security Access manager (ISAM v8), Tivoli Federation Identity Manager (TFIM v6.2) Confidential WebSphere (v7.0), RAD, Tivoli Directory Server, Active Directory, Confidential Tivoli Directory integrator, DB2, Jxplorer.

Confidential - Detroit, MI

SiteMinder and LDAP Consultant

Responsibilities:

• Installed Policy Servers R6sp5 and also One View monitor to monitor the statistics of Policy Server.
• Upgraded the SiteMinder Policy Server from R6 SP1 to R6 SP6, R6 SP5 to R6 SP6.
• Installed Policy Server R6 SP2 against Novell eDirectory user store. And created POC for R6SP5 to R6 SP6 upgrade
• Configured policies on CA SOA Security Gateway Server R6 against R6Policy Server.
• Configured CA Wily Enterprise Monitoring tool against Apache webserver, WebLogic Server and Policy Servers.
• Involved in upgrade of Novell eDirectory server from 8.8.1 to 8.8.5 SP5.
• Installed Option pack for Policy server and Web agent for configuring the Federated Security Services and User Identity between partner sites.
• Installed and configured Apache,
• Microsoft IIS and Sun iPlanet web servers, Weblogic application servers, with Netegrity Siteminder authentication, and Sun One LDAP Directory Server.
• Migrated SiteMinder protected environment from Unix Solaris 10 to Linux SUSE 10.
• Implemented SSO across multiple domains, and created two level of authentication for additional security.
• Migrated large amount of LDAP data across the environment to create a identical production environment to support load testing.
• Monitoring of SiteMinder server logs for identifying problems with Authentication and authorization of users.
• Involved in Master, hub, consumer Replication of userstore from one Directory Server to other.
• Redesigned the existing LDAP schema with some custom attributes and object classes.
• Worked on backup, recovery of userstores in Sunone LDAP Directory Server and configured Load Balancing, Failover mechanisms.
• Responsible for providing 24x7 on call Site minder support.

Environment: Windows Server 2003/2008, SiteMinder R6 SP1/SP5/SP6, iPlanet Web Server 6.0, Novell eDirectory server 8.8.1/8.8.5, CA SOA Server R12 SP2, CA Wily Enterprise Monitor, WebLogic 8/10, JBoss 5, Apache 1.x/2.x, IIS 6, JDK 1.6, J2EE, EJB, JSP, Oracle 11g.

Confidential

SiteMinder Engineer

Responsibilities:

• Managed User Certificates in LDAP directories for authenticating users. Andconfigured authentication support for X.509 certificates over SSL for validating the users.
• Analyzed the environment and gathered information on the environment to decide the best design and architecture.
• Configuration manager for migrating to a new code repository. Implemented SiteMinder Security Zoning for an internal web portal for web applications accessed thru web portals.
• Configured web agents to protect and manage access to enterprise resources.
• Worked with application teams to configure web server to integrate with SiteMinder plug-in.
• Configuring User Authentication stores and Policy Authorization stores on LDAP.
• Configured User Directory object and Directory mapping object and cookie provider.
• Created user directories, rules to provide authentication and authorizing access to enterprise resources.
• Searching, modifying attribute definitions of LDAP, and troubleshooting synchronizations issues for User Directories. Created scripts for maintenance of user accounts and group existence in LDAP.
• Executing Backups and Recovery strategies for directory data (DIF), resolving back-up and recovery issues in a High availability environment.
• Conducted Analysis and planning for LDAP implementation, Mapping applications and data sources to default or supported schema in both LDAP and non-LDAP environment.
• Integrated secured applications with SiteMinder Policy Server. And implemented disparate authentication and authorization for applications.
• Configured Authentication and Authorization to support Higher availability, Fail-over, Load balancing. And Executed Recovery and Backup strategies for directory data (DIF).
• Implemented Replication mapping between replica hub/consumer directory servers. And monitored of replication status for synchronization and conflicts.
• Troubleshooting Web Agent and SiteMinder Policy Server issues and Supported production environment for resolving the tickets. Resolved various production issues related to Single Sign-On for web application with High availability.
• Coordinated with CA support team to resolve the issues came across in development and other environments.

Environment: Sun Solaris 2.8, Windows 2000,2003, Netegrity SiteMinder 5.5 6.0, Web Agents 4.x,5.x,6.x, Sun One directory server 5.1,5.2, IIS, IPlanet Web Server5.0, Confidential Http Web Server