SUMMARY:

• Over 14 years of experience in the Information Technology industry with Strong background in Java,J2EE,Web Services Systems/Software/Security Analysis, Design and Implementation.
• Strong experience in architecting, designing,developing web and system based large scale enterprise componentsand applications usingUML,Spring, Java/J2EE multi tier architectures.
• Strong experience architecting applications/components utilizingtechnologies likeOpenNLP, SOLR, XHTML, JSP,JavaScript, Servlets, JSF, J2EE, Java Beans, RMI, Swing, EJB,MDB, JNDI,JDBC,XML, Spring, AspectJ, JMSand JUnit.
• Proficient developingXML parsing APIs likeDOM, SAX andANTscripting, Cruise Control and Mavenfor building and deployment.
• Strong experience in developing reusable Components/SOA/Web Services including SOAP,UDDI,JAXRPC, JAXWS, REST, JAXB, Hibernate, iBatis and Toplink.
• Strong experience using Agile methodologies like SCRUM, eXtreme programming and Adaptive Software developmentand Standards like FEA, NIST, FIPS, WS - *, W3C and Oasis.
• Strong experience using design patterns and frameworks likeSTRUTS, Spring, JSFandMVC 2 architecture.
• Good working experience in working with Application servers including OC4J9.0.4,Oracle9iAS, WSAD5.1, Sun Application Server9.1 and Glassfish v3.

TECHNICAL SKILLS:

Operating Systems: RedHat Linux8.0/9.0, Windows 98/NT/2k/XP/7, Sun Solaris 7.0/8.0/10, SuSE 9.0, CentOS

Languages: C, C++, Java7, HTML, UML, Shell Scripts, Expect, XML, PL/SQL

Java/J2EE Technologies: JSP, Servlets, STRUTS, Spring, Swing, JavaScript, JDBC, J2EE, EJB 2.0JNDI, JMS, JAXB, SOAP 1.2, JAXRPC, Axis, JAX-WS, JAXR, UDDI 2.0JSF, AspectJ, ANT, JUnit

Applications/APIs: Oracle XML-Security/WS-Security APIs, Oracle BPEL PM, Oracle IDMXSL, XSLT, XSLT-FO, DOM, SAX, Win32 API, Quartz Scheduler, TopLink, Hibernate, iBatis, OpenNLP, Stanford NLP, JSoup

Databases: Oracle 9i/10g/11g, MySQL, Postgres

Tools /Version Control: Rational Rose, Toad, PGAdmin, Oracle Migration Workbench, Eclipse, JDeveloper, Netbeans, Visio, Microsoft Visual Studio 6.0, Ethereal, VMWare 4.0, Tripwire, Solstice Suite, OpenCA, CiscoIPSU, LanWatch32, Netperf, Httperf, PVCS, SVN, CVS, VSS, Cruise Control, Maven

Networking: TCP/IP, UDP, NFS, Mobile IP, IKE, IPSec, DHCP, ISAKMP, HTTP, Kerberos, SSL, RSA, 3DES, SHA1, VRRP, DNS, ICMP, LDAP, AutoFS, NIS+, NIS, RADIUS, PKI

Servers: Glassfish v3, Sun Application Server 9.1, WSAD5.1, WebLogic 7.0/8.1, OC4J 9.0.x/10g, Tomcat 7.0, Apache, SOLR 4.10, Lucene, FAST ESP 5.3

Methodologies: Agile, eXtreme programming, Adaptive Software development, SCRUM

PROFESSIONAL EXPERIENCE:

Lead Developer

Confidential, Washington, DC

Environment: Windows XP, Sun Solaris, Linux, AWS, Mac OSX Language/Tools:J2EE, Java, SOAP, JAX-RPC, JAX-WS, REST, XML, JSF 1.2, Spring 4.x, SJAS 9.1Weblogic 8.1, Hibernate, iBatis, Maven,Ant, WSDL, SSL, Microsoft Active DirectoryXML, RichFaces3.3.3, SOLR 4.10, FAST ESP 5.3, Elk Stack, JSoup, Eclipse, OpenNLP, JUnit

Responsibilities:

• Architected and implemented Analytics platform for collecting and reporting paywall subscriptions, cancellations and associated analytics details. Also implemented dynamic performance statistics dashboards with ElasticSearch and Kibana.
• Architected and developed Post Pulse which provides temporal news trends of Post content on social networks like Facebook, Twitter, Stumble Upon, Fark etc.
• Designed and implemented content and collaborative filter based hybrid recommendation engine for personalized news, news recommendation and unsupervised Topic generation & assignment.
• Implemented Data APIs for Native Apps for all mobile devices.
• Designed, configured and implemented feeds in JSON, JSONP and XML backed by search engines for mobile devices like iPad, iPhone and Androidbased devices utilizing Spring & JSoup.
• Designed, configured SOLR and FAST ESP based search engines and implemented associated wrapper APIs for consuming applications to use.Also implemented OpenNLP based software component that extracts entities like Person/Location/Organizations and Concepts/Themes from free text using Natural Language Processing (NLP) and Machine Learning alogorithmshooked into publishing systems.
• Responsible for configuring/maintaining/supporting all search engines/servers and associated applicationsfor Washington Post.
• Designing/architecting, developing enterprise-wide shared services using SOAP, Web Services, JAX-RPC, XML, Spring, JSP and Servletsand associated test cases in JUnit. The database persistence is performed via iBatisto Oracle DB.Used AspectJ for Logging and transaction management. The services are built using Maven and cruise control and deployed on to SJAS 9.1 server.
• Designed, developed and support a publishing system for editors to create, update and publish media galleries into Content Management System and live sites via XML. Database persistence to oracle DB is provided via Hibernateand the front end was developed in JSF interfacing with Spring based middleware. Access control to application was provided via Microsoft Active Directory.
• Designed and developedREST services that expose CMS functions for consuming applications.
• Developed JAX-RPC based Geocode Web Service that retrieves Geocoding mapping data from Google web service to provide mapping and navigation data for display on washingtonpost site deployed on weblogic 8.1 application server.
• Provide on-call services to the production content management systems on a rotating schedule. Make sure development conforms to Agile development and SCRUM methodologies.

Confidential

Web Services Security Engineer

Responsibilities:

Environment: Windows XP, Red Hat Linux 8.0 Language/Tools: J2EE, Java, SOAP, JAX - RPC, JAAS, Java-GSS, XML, Oracle XML/WS-Security APIsOC4J 10.1.3,Oracle BPEL PM, Oracle IDM, Ant, WSDL, JAXB,SSL, Microsoft Active Directory, JUnit, JDeveloper, Trillium Director, PKI

• Currently designing/architecting the Financial Management Segment Architecture (FM LOB) in accordance with the Federal Enterprise Architecture (FEA) guidelines and realigning the FM Business processes to follow the FEA architecture guidelines.
• Designing/Architecting and implementingPKI based transparent message level security handlers/plug-in based on SOAP, XML, Oracle WS-Security and XML-Security APIs compliant with the NIST, FIPS, WS-* (WSv1.1, SwA1.1, BSP 1.0), Oasis and W3C standards. The implementation provides Confidentiality and Integrity services for JAX-RPC and Oracle BPEL Processes,Web Service Messages and their attachments transparent to the consuming applications while adhering to the stringent guidelines of the above mentioned standards following SCRUM methodology.
• Evaluate security related tools and technologies like Oracle Identity Manager, Oracle BPEL Process Manager etc as relevant to PBGC(Pension Benefit and Guarantee Corporation)application needs for RBAC (Role Based Access Control).
• Develop Security Plans compliant to NIST, FIPS, OMB and PBGC Security directives.
• Implemented Address Validation Web Service by wrapping Trillium Director Responses into a web service call utilizing the Oracle WSIF framework called from the OracleBPEL Process environment.
• Developed JAX-RPC based Web Service handlers utilizing technologies like JAAS and Java-GSS (Generic Security Service API) for transparently authenticating and authorizing specific application consumers holding valid Kerberos credentials to access privileged Web Services.

Confidential, Annandale, VA

Principal Engineer

Environment: Windows XP, Red Hat Linux 8.0 Language/Tools: J2EE, SOAP, Java, JavaScript, XML, XSL, OC4J 10g/9.0.4, TopLink, Struts, ANTJAXB, Axis, Oracle 10g, LDAP, SSL, Microsoft Active Directory, JUnit, Quartz Scheduler, HTML

Responsibilities:

• Responsibilities included designing/architecting and implementing role based task oriented workflow and formflow for FEMA Disaster Grants Management system (EMMIE) using the in-house SOA Framework following SCRUM and Agile methodologies. Also coordinated a team of 15 developers to code the system utilizing the in house developed framework/workflow engine.
• Design and develop an in house SOA based Framework and associated components utilizing JAVA, J2EE, SOAP, Web Services, Axis, XML, XSL, STRUTS, JAXB, JSP, HTML, JavaScript and Oracle that performs Workflow/Formflow management with minimal configuration for rapid development/deployment of huge applications compliant to W3C Standards. The framework services include but are not limited to services like Repository, Document Management, Export/Import, Security and Audit services and Workflow Engine, Formflow Engine.
• Configure and Manage change management/nightly builds of Framework code utilizing Cruise Controlto deploy to Oracle 9iAS server.

Confidential

Java Development Manager/Principal Engineer

Environment: Windows XP, Red Hat Linux 8.0 Language/Tools: J2EE, SOAP, Java, JavaScript, XML, XSL, OC4J 10g/9.0.4, TopLink, Struts, ANTHTML, JAXB, Axis, Oracle 10g, LDAP, SSL, Microsoft Active Directory, JUnit, Quartz Scheduler

Responsibilities:

• Implemented Grants Management System for Dept. of Justice (DoJ) programs. Coded JAXBbasedSSL enabledSOAPWeb Services for uploading grant solicitations posted by DoJ for program offices/counties/agenciesacross country and for downloading completed applications from counties/agenciesby polling at regular intervals using Quartz Scheduler and persist them in appropriate JMS queues,backed by Oracle DB, for retrieval and processing.
• DevelopedJSPs, HTML pages, Servletsto poll at regular intervalsand MDBs for downloading newest applications. Also implemented validation adaptersthat useXPATHfor validatingdownloaded XML documents based onrules described in XML/XSD file before persisting the validated XMLs into OracleDB via EJBs.
• Coded JSPs,Actions and Action Formsfor multiple modules tosecurely display/delegate(for workflow) applications downloaded from the concerned web services, MDBsand EJBs using STRUTSMVCframework. Modifications and reassignments are stored into Oracle database using Toplink mapping for further processing and forwarding them to authorizedroles for authorization/approval based on predefined DoJ conditions/restrictions.Dual LDAP, ADS domains were used for authentication and authorization of roles based on subscription to JMS queues.
• Developed EJBsaccessed via session façade to migrate or generate user accounts, organizations andorganizational units from oracle DB to two Active Directories based on the user role criteria and their subsequent updates.Associated GUI was based on STRUTS MVC framework.
• Developing test cases using JUnitto test Toplinkdescriptor mappings for corresponding DAO’sand cactus tests for Web Services.
• Creating WAR and EAR files using ANT scripts and deploying them on Oracle 9i/10gAS server conforming SCRUM and Agile methodologies.

Confidential, Fairfax, VA

Software Systems Engineer

Environment: Sun Solaris 8.0, RedHat Linux 8.0/9.0, Windows XP/2000 Language/Tools: J2EE, JAAS, JNDI, SOAP, UDDI, WSDL, JSP, XML, XSLT, WebLogic 7.0, TomcatAxis, Ant, STRUTS, SSL, Expect, Shell Scripts, IPchains, IPtables, Tripwire2.2.1Solstice, VMware 4.0, FreeRadius 0.9.2, Cisco Aironet 1200 AP, Weblogic 7.0, Sun Java Application Server, PKI

• Designed, Implemented and deployed back-end as well as front-end for Personnel Activity Report System coded using HTML, JSP, Servlets, XML, XSLT, SSL, ANT, Oracleand session façade concepts. Hierarchical Access Control was developed/enforced for users and associated displays based on their designations using JAAS. Provision for printing reports in PDF format was provided using XSLT-FOadhering to SCRUM development methodology.
• Coded and deployed PKI infrastructure for legacy C/C++ applications interacting securely with J2EE server services leveraging the platform independence of XML and JMS for providing subscription servicesbased on message façade -accessed and persisted via EJBs to Oracle DB.
• Implemented and deployed UDDI registry backedWeb Services and supported WSDLinterfaces. The JAXRPCbased SOAP WebService provided encryption/encapsulation of theprobes sent to Honeypots for intrusion detection so that it wouldn’t disrupt legal internet traffic.ACL’s were enforced for security utilizing JAAS. Deployed Axisto use it as the soap engine for the Web Services.
• Creating WAR and EAR files using ANT scripts for deploying on WebLogic application server.
• Implemented a GUI based JNDI interface/hooks to administer/monitor the NIS, DNS, LDAP and Kerberos services from central server. GUI was coded using JSP, Custom tags, XML and XSLT.
• General responsibilities include configuring and administering-Apache/Sun Application Server/WebLogic/Tomcatservers, writing ANT scripts for deployment, backups using solstice, routing tables, security administration of NIS+/VPN, custom built firewalls and detect/rectify intrusions using Tripwire, building firewalls in Linux using IPChains and IPTables and account creations/deletions for Linux, Unix and Solaris systems.Was also involved in implementing LDAP with kerberos authentication in Linux environment.
• Designed and Implemented SCIT (Self Cleansing Intrusion Tolerance) servers that provide a brute force method for maintaining the integrity of the networks, serves as a load balacing/fail over server while the legitimate traffic flows unabated. Firewall, NFS, DNS and Web servers were implemented based on the SCIT architecture. Used VRRP to maintain single IP/MAC for the farm. Tripwire and Snort were used to check intrusions.
• Built, Configured and Deployed freeRadius based EAP-MAC authentication and accounting for wireless clients accessing network via Cisco Aironet 1200 APs that are powered by power over Ethernet injectors.

Confidential, Herndon, VA

Software Engineer

Environment: Windows NT/98/Me/2000, Sun Solaris, Red Hat Linux 7.2

Responsibilities:

• Implemented standalone and web based Digital /Security policy/Security Key management application that generates security policies and their corresponding XML configuration files for the Home/Foreign/Extranet Agents and the clients based on user supplied requirements/data using Java, JSSE, JCE, SSL, LDAP, Swing, J2EE, STRUTS, OCSP, SOAP/XML based Web Services and Oracle
• Designed and developed a mobile VPN solution integrating mobile IP and IPSec protocols from respective RFC’s (2002 and 2006) for allowing secure communications via LAN, wireless/802.11 and dialup. Was responsible for the home agent code thatprovided mobile IP security.
• Implemented RSA, Diffe-Hellman encryption and DHCP functionality (for Hot Spots) in MobileIP by fooling the TCP/IP stack that has the permanent IP of the client got from the configuration files based on RFC 2002. The Home Agent or the Foreign Agent discovery is done by ICMP Type 9 messages.
• Performed installation, Configuration of policies, rules and NAT in firewalls and web servers. Testing, troubleshooting, Quality Assurance and code review analysis (based on SEI CMM, IEEE standards and SCRUM) for optimizing the performance of HTTP, Mobile IP tunneling and Encryption/Digital Signatures/s through different firewalls like Raptor, Check Point, Gauntlet, Pix etc

Confidential

Software Programmer

Environment: UNIX

Responsibilities:

• Developed a computer based satellite tracking simulator for aiding the development and testing of antenna control systems for large earth stations that reduce the integration and optimization time of tracking. The optimizations used are Precision Step Track and Hill Climbing techniques, which use the Signal Strength Gradient Algorithm and are verified by the Least Squares Fit under a closed loop control system to drive the dual pole antennae through RS232C ports.

Confidential

Software Programmer

Responsibilities:

• Coded the software for an Online Examination package using Java and Oracle, GUI was created using Java 1.1.2 AWT which can be used to administer exams to remote locations. Several sets of question papers were stored in a hash table format. JDBC connectivity is used to connect the front end to the backend. Remote server was accessed using RMI (Remote Method Invocation). The student information is stored in Oracle table format.
• Designed and developed a Graduate information representation System. GUI was developed using Java 1.1.2 AWT for data maintenance operations. JDBC OCI (Type-2) driver is used in connecting to the Oracle database. An applet that accesses the Oracle database was developed. This applet enables students to check course requirements for graduation and enlists completed courses and their present GPA.
• A website was developed to maintain a database of current publications and an online Form to order the books. People who registered were given a Personal Bookshelf user account. Books can be read online and placed in personal library by accessing the accounts. My role in this project is to develop Front-end forms, Server side programming and database connections by using ASP Objects. And also took part in designing the backend Database in SQL Server accessed through the IIS.
• Developed a software code for Sales Order system using Visual Basic and Oracle for automobiles originating from different places and their price fluctuations from place to place. Price conversions relative to head office were computed and stored in oracle table.Orders were placed through the web page, which were done using visual basic Active-X controls and templates and ASP’s.