PROFESSIONAL SUMMARY:

• Senior developer having 13 years of hands on experience using Java, JEE based technologies, open source frameworks on Unix, Linux, widows platforms.
• Strong experience in HTML, JSP, SOAP/RESTful web services, Jython, Python, Spring framework, Ajax, JQuery, SAML, SOA, XML, XSLT, HTML 5.0, Shell Script, Perl Script.
• Expert in providing solution to make application secure and vulnerable free and experience in code analysis using Sonar, Fortify, Black - duck, Checkmarx and Open source tools.
• Hands on experience in Object oriented analysis, and design using Visio, Rational Rose, UML, and design patterns/design principles.
• Strong hands on experience in identifying potential threats develop mitigation plan and efficient, modern, cost-effective and OWASP TOP 10 -2017 compliant security solutions.
• Provide hands on training to application developers in secure coding techniques and best practices and helping to integrate security into the software development life cycle (DevOpsSec).
• Proficient in providing solution to make application secure and vulnerable free and experience in code analysis using Fortify, BlackDuck, Nimble, WebInspect, ZAP, Sonar, SonarQube, PMD, Findbugs.
• Automation of security scanning tools using Jenkin jobs and drove the adoption of security scanning tools Fortify, Black Duck for both development production uses.
• Expert in performing static/dynamic vulnerabilities code fixes, testing, manual code inspection, threat modelling and design reviews to identify vulnerabilities and security defects.
• Strong hands on experience in Portal development & implementing internal/external SSO in Sun IDM, IAM using different Encryption/Decryption techniques (like secure keys, SAML).
• Experience in writing Database queries.
• Experience in the Agile Model Driven Development, Scrum, JUNIT frameworks.
• Hands on experience in developing in automation of security tasks during code builds, testing and deployments using Jenkins / Ansible scripts.
• Strong hands on experience in Portal development & implementing internal/external SSO in Sun IDM using different Encryption/Decryption techniques (like secure keys, SAML).
• Hands on experience on automation framework, Agile, DevOps, DevOpsSec, CHEF client/server, integration of CHEF with Jenkins for continuous deployment and creating recipes/cookbooks using Ruby programming.
• Fair understanding of AWS, MongoDB, AGENSGRAPH, Neo4J, SQLite.
• Exposure to Ping Identity- SSO and developed POC.
• Build maintain and enhance communication channels with the project board, senior management, clients suppliers, end users and internal departments.

TECHNICAL SKILLS:

Java/J2EE Technologies: Advanced Java, Servlet, JSP, JDBC, JNDI, JMS, JAXB, AJAX, JQuery

Scripting Language: Shell Script, Perl Script, JavaScript, Jython, Python, Ruby

IDE: Eclipse, Net Beans/iRapid, JDeveloper, SOAP UI.

Database/Languages: SQL, PL/SQL, MySQL, Oracle11g, Informix

Frameworks: Struts 2.0, Hibernate 2.0, Spring, Angular JS, TestNG, Agile

Web/Application/portal Servers: Tomcat, JBOSS, We Logic, iPlanet Portal 7.0, Identity Manager 7.0.1

OS: Unix/Linux, Windows

Testing/Defect Tracking Tools: JUnit,JAmon, JMeter/TestNG, Remedy, Quality Centre, Sonar, Jira, Bugzilla, Nimble

Tools: /Technologies: XSLT, LDAP, SAML, Erwin TOAD, Eclipse, ServiceNow, Jira, SOA, RESTful Web Services, JMS, SOAP, EA, PMD, FindBugs, Checkstyles, CHEF, Jenkins, GIT, Stash, Ruby, Rational Rose, CVS, VSS, SVN, Clear Case

Development Methodologies: OOAD, SOA, 6 Sigma

Software Engineering Practice: Agile, DevOps, DevOpsSec, SCRUM, Iterative development.

PROFESSIONAL EXPERIENCE:

Confidential

Sr. Developer

Responsibilities:

• Analysis of existing PONMS/VPNS management systems and developed design specifications for retrieving alarms from various NE’s through third party vendors.
• Implementation of consuming SOAP/REST web services for retrieving alarms from NE’s through third party systems and filtering and posting alarms to Verizon Fault Management System using Java/J2EE.
• Implemented AES algorithms for encryption/decryption as part of achieving secure communication between applications.
• Developed business rules for processing alarms and implemented filtering rules using Jython script.
• Design and development of topology data(Reading, Parsing XML files using SAX and posting of data to Verizon systems.
• Validate source code for OWASP Top 10 vulnerabilities across applications, identify potential threats and provided cost effective solution as per the Verizon’s /OWASP guidelines.
• Automation of security scanning tools using Jenkins jobs and drove the adoption of security scanning tools Fortify, Black Duck for both development production uses.
• Led the security reviews for Application Security, Web Applications and Infrastructure Security
• Performed security automation focusing on Threat modeling, manual exploitation and mitigation of OWASP Top 10 security threats in web applications.
• Training application developers in secure coding techniques and best practices and helping to integrate security into the software development life cycle (SDLC).
• Impact analysis for existing bugs and identification of root cause and providing solution for bug fixes for application code venerability fixes and code review, code optimization.
• Developed Shell script to automate mediation services processes and deployment of applications on Dev/Prod environment.
• Actively involved in developing applications on emerging technologies- DevOps, Jenkins, Ansible, Stash, GIT on Linux environment.

Environment: Java, Python, AES, Jython, XML, HTML 5, JSP, Java Script, Shell script/Perl script, TL1, SOAP Web services, RESTful Web Services, JMS, Fortify, Blackduck, Web Inspect, Jenkins, Ansible, GIT, Stash, DevOps, Informix, Red Hat Linux, Oracle, SOAP UI, Oracle, Jira, WebLogic, tomcat.

Confidential

Lead Developer

Responsibilities:

• Design and development of communication canter (Secure emails) functionality to make inquiries, Reply emails and retrieve emails from SOAP web services using Java/JEE, JSP, HTML, JQuery, JDBC,JAXB, and Spring framework.
• Wrote code for exception handling, logging, and implemented various encryption/decryption techniques for secure content and session integration for entire module.
• Provided security code reviews using the Fortify Source Code Analysis Product and evaluated results for security vulnerabilities for banking applications. Trained, documented and advised application developers for security risks.
• Migrated from finding security problems to finding elegant and effective business security solutions for bank.
• Implemented viruses scan functionality for uploading attachments for secure email modules.
• Design and development of viewing Tax Documents and retrieve the data from SOAP web services using JAXB and decrypted Secure tax data to display to respective user.
• Wrote Shell script to automate stand-alone /batch processes and java program to call super scheduler to manage various jobs.
• Developed Functional & Technical specifications documents for Message Centre module.
• Actively involved in developing applications on CHEF for IT infrastructure automation, rainbow for testing automation Jenkins for continuous deployment which can drive business innovation.
• Developed POC for installing and configuring CHEF client/server, creating recipes/cook books, integration of Jenkins & GIT with CHEF on Linux environment

Environment: Java, JDBC, XML, HTML5, JQuery, JavaScript, HTML, CSS3 AJAX, AngularJS, JAXB, JNDI, Spring 3.0, hibernate, Smooks, SOAP, JMS, RESTful, Shell script, SVN, Maven, SQL, PL/SQL, Oracle 11g, JBOSS 7.1.3, Tomcat 1.7, QC, Fortify, Sonar, Nimble, Bootstrap, SOAPUI, Junit, JMETER, TestNG, Jira, GIT, CHEF, Jenkins, Ruby, Super Scheduler.

Confidential

Senior Developer

Responsibilities:

• Designed & developed “Card and Application Management System” & “Participant” module.
• Development & customization of “IPMD” module for Telecom Billing CCBS- System.
• Analyze and worked on Confidential Telecom product - NVIOS & Mobile Wallet.
• Designed and developed web pages using HTML 5, CSS3, JSP,AJAX, jQuery.
• Designed the database tables using Erwin data modeler and Toad as GUI tool.
• Provided solution for application code venerability fixes and code review, code optimization.
• Implemented external SSO using various encryptions, decryption techniques using SAML.
• Analyze information security systems and applications, recommend and develop security measures to protect information against unauthorized modification or loss.
• Wrote programs in C language for batch files creation and libraries used for mediation system.

Environment: NexCore, C, Java, JDBC, JSP, JSON, AJAX, JQuery, JavaScript, HTML, Spring 3.0, Oracle, iBATIS,JIRA, MAVEN, JBOSS, Tomcat, web logic, Eclipse, JMS, Web Services, Jira, Jmeter, TestNG, Linux, Oracle, Erwin, Toad, CVS, Clear case, Jira, SOAP UI

Confidential

Senior Developer

Responsibilities:

• Developing Java/J2EE Web based applications in Unix Environment and Integration of Web based Applications in Sun One Portal.
• Developing new channels using Java/J2ee /XML, SAML, External/Internal SSO, XSLT etc. and deploying them on Sun ONE portal & Proving Production Support.
• Integration of various Web based applications in Sun one portal and Implementation of Single Sign on (SSO) Using different Encryption and Decryption techniques/algorithms.

Environment: Sun ONE Portal Server, Sun ONE Identity Server, Sun ONE Web Server, Sun one Directory Server, Java, JDBC,JSP,JMS,XML, XSLT,HTML, Eclipse, Sun One App Server, Sun Solaris(UNIX), SOAP UI, Apache Ant 1.6, SOAP, Oracle, Clear Case, CVS, JMETER, JUNIT, Quality Center

Confidential

Developer

Responsibilities:

• Developed Java/J2EE based applications in Unix Environment and Integration of Web based Applications in web logic Portal.
• Analyzing, resolving and carrying out root cause analysis of the bugs & Providing the production support and implemented Confidential Processes (DMAIC model) in Global Tracking Project.

Environment: Java, JDBC, JNDI, HTML, Java Script, JSP, Servlet, Ant, Web logic Portal server, Web logic workshop, Web logic App Server, Eclipse, Erwin, Unix/Windows Quality Centre, MS SQL Server

Confidential

Developer

Responsibilities:

• Developing applications using Java, JSP, Java Beans using DAO J2EE Design Patterns.
• Development of various database queries for different functionalities.

Environment: Java, J2EE, Servlets, HTML, JSP, Vignette Application portal, JDK 1.4, Apache Tomcat, JBOSS, Windows, Linux, Eclipse, SVN, CVS, Quality Centre.