SUMMARY:

Security expert with 19 years of experience in technologies, security, and best practices in the creation and deployment of solutions protecting applications, systems and information assets. Hands - on experience leading all stages of system development efforts, including requirements definition, design, testing, and support. Skilled trouble-shooter continually focused on identifying, isolating and resolving product concerns. Skilled project leader; able to direct multiple tasks effectively and readily master innovative software and tools.

CORE COMPETENCIES

• Architect
• Software Design & Development
• Mentor
• Team Management
• Strong Customer-Focused
• Solve hard problems
• Eager to learn New things
• Startup Company Culture
• Secure development Vulnerability Assessments
• Multi-tier application architectures
• Data Migration
• IaaS
• PaaS
• SaaS ERP
• POS
• Enterprise Security Management
• Change Management
• Blockchain
• Data Analytics
• Encryption
• Business Continuity & Disaster Recovery
• Cybersecurity
• Cloud Security
• AWS
• Penetration Testing
• FIPS
• COBIT
• SOC 2
• HIPAA
• NIST
• PCI DSS

TECHNICAL SKILLS:

Operating systems: Windows, Linux/Ubuntu/CentOS

Languages: J2EE, Java, Spring Boot, Python, SQL

Internet technologies: RESTful API, JSON, PHP, Wordpress, XML, JavaScript (ES6), CSS, HTML

GUI tools/IDE: Eclipse, Android Studio, PyCharm

Cloud Platform: Amazon AWS, Google Cloud Platform GCP, Kubernetes

DBMS: SQL Server, PostgreSQL, MongoDB, Cassandra, DynamoDB, Sybase, Oracle, MySQL, HSQL

Servers: Openbravo ERP, Tomcat, Apache, IIS, Active/LDAP Directory

Web Design Tools: Adobe PhotoShop, Dream weaver

OOAD: UML, Visio, Rational Rose

Version control: Perforce, Git, GitHub, ClearCase, Visual Source Safe, Subversion

Methodologies: Agile - Scrum/Kanban, Waterfall

Virtualization: VMware Esxi, VMware workstation

Other tools: Nessus, Wireshark, Burp, VMware, JUnit, Coverity, FindBugs, SVN, Google Analytics, Google SEO, eTrack, JIRA, Confluence, Jenkins

PROFESSIONAL EXPERIENCE:

Confidential

Software Architect / Team Lead

• Migrated the local ERP to the AWS cloud and implemented appropriate security features.
• Involved in design, coding, code reviews, and unit testing using Java.
• Found vulnerabilities based on OWASP Top 10 and made appropriate code changes in Java.
• Managed Software engineers and provided technical guidance. Used Agile/Scrum methodology for Software development.
• Created many reports/analytics on customers purchase patterns, chronic customers and missed customers using Java.
• Did the design of new services using Spring Boot and Spring Microservices.
• Identified many performance issues in the Open source code of Openbravo ERP written in Java and fixed them.
• Identified and fixed many Scalability and Performance issues of the ERP due to the load during peak operational timings.
• Identified issues related to Java multi-threading in the POS code and fixed them.
• Did the risk assessment of critical information assets and created the Disaster Recovery Plan.
• Implemented the data backup considering RPO and RTO.
• Evaluated different communications between ERP and POS systems and implemented appropriate data encryptions.
• Implemented Identity and Access Management of the POS systems based on the role types.

Environment: Java, J2EE, OpenBravo ERP, AWS, Spring Boot, Spring Microservices, Python, JUnit, Eclipse, Linux / Ubuntu, Windows, Coverity, Agile - Scrum, Nessus, Visio, Tomcat, XML, VMware

Confidential, Mountain View, CA

Sr. Principal Software Engineer

• Technical leader for many of the high priority P0 escalations from fortune 100 customers of Confidential .
• Technical contact and Lead for China and India offshore teams and coordinated across different product managers.
• Reviewed the network/server topologies of customer environments and provided appropriate suggestions.
• Lead many security initiatives from inception to successful deployment, across multiple layers of architecture based on the vulnerability reports.
• Participated in Requirements, Design & Code reviews.
• Reviewed the FIPS compliance requirements and made appropriate changes to the Server developed using Java.
• Migrated the server to Amazon AWS to be available through AWS Marketplace and streamlined the process of configuration and encryption key generation with few clicks.
• Used agile methodologies (Scrum and Kanban).
• Provided appropriate mitigation controls in Java for different admin types accessing the endpoint management servers.
• Involved in the implementation of Server Site Replication and Load Balancing of Servers. Written a custom Java adapter for replication.
• Involved in the creation of Java UIs for configuring Anti-Virus, Anti-Spy ware, Firewall, Proactive Threat Scan, Tamper protection etc. policies.
• Involved in the implementation of Live Update of the product.
• Done design and implementation of licensing of the product.
• Involved in the development of the Server using Java, J2EE, PHP, JavaScript, Apache, Tomcat.
• Implemented security content group update provider on the server side which helped large customers in easy delivery of security content to endpoints reducing the network congestion.
• Analyzed many issues related to Cross-site scripting (XSS) and Cross-site request forgery (CSRF) vulnerabilities.
• Managed remote teams and provided technical support in resolving the issues.
• Analyzed the reports from Nessus and Burp Suite vulnerability scanning Tools provided by customers. Also, analyzed the Wireshark reports for performance tuning.
• Evaluated the reports of penetration testing done by 3rd party vendors made appropriate code changes written in Java.
• Improved the performance of database replication with focus on disaster recovery using SQL query analyzer.
• Interacted with the customers to come up with better design considering Customer Experience.
• Involved in the design of caching design of content distribution.
• Introduced the concept of developer also providing test scenarios to QA which was adopted by many teams. This approach increased the product quality.
• Selected as a mentor for many colleagues in the company.
• Provided and support for troubleshooting the customer issues to the Support team, which helped in resolving the customer issues fast.

Environment: Java, J2EE, JavaScript, JQuery, PHP, Swing, Servlets, AWS, Junit, Eclipse, Coverity, JIRA, Jenkins, Etrack, Perforce, Agile - Scrum/Kanban, Nessus, Wireshark, Burp suite, Confluence, Visio, VMware, SQL Server, Oracle, Sybase ASA, LDAP, Apache, Tomcat, IIS, RESTful API, JSON, PHP, XML, CSS, HTML, Windows, Unix

Confidential, Milpitas, CA

Lead Engineer

• Worked on Electron Stimulated X-ray and E-Beam based Wafer Inspection Tools.
• Involved in design and implementation of Diagnostics tools for the troubleshooting of the Systems using Java/J2EE.
• Used Capability Maturity Model Integration (CMMI) in every phase of the project.
• Prepared Gantt charts for scheduling the tasks.
• Created projects using IBM Rational ClearCase software for configuration management (SCM) of source code and other software development assets and managed them.
• Created test scripts using Python for testing of the business logic.
• Participated in Requirements, Design & Code reviews.
• Extensively involved in Change Management process and Quality Assurance.
• Did software re-engineering for some of the modules and created reusable components.
• Received multiple s for the success of multiple projects.

Environment: Java, Python, J2EE, JavaScript, Swing, JCChart3D, JNI, RMI, XML, Poet, UML, Rational Rose, ClearCase, JSP, Servlets, JDBC, SQL, SQL Server, Tomcat, CSS, HTML