PROFESSIONAL SUMMARY:

• Over 8 years of hands - on professional experience with Strong technical skills, security functions using Okta, Ping Federate, PingID, Azure AD, Access Gateway and Siteminder.
• Experienced in the implementation of OAuth, OpenID Connect.
• Experienced in deploying and upgrading Ping Federate 8.x - 10.x in clustered environment and also integrating with PingID for MFA.
• Experienced in implementing SAML and Oauth based SSO using multiple authentication products like Okta, Ping Federate, CA Siteminder and Azure AD.
• Creating and managing application integrations for identity and access management. having experience of creating conditional access policiesmultifactor authentication (MFA), and resolving the MFA issues.
• Experience in creating directory and proxy server configuration and administration.
• Experienced in creating various adapters like Kerberos, HTML, PingID, composite.
• Helping client to manage Okta service, Okta life cycle management with Active Directory, LDAP, SSO, auto provisioning and automating different infrastructures.
• Performing OKTA integration while adhering to change management policies and procedures.
• Experience in integrating enterprise applications such as salesforce, ServiceNow, box and etc. using SAML in Azure AD
• Configured conditional access policies and did analysis using whatif feature in Azure AD.
• Configured B2B applications is Azure AD using external identities and created self service signup policies for the guest users.
• Performed access reviews on the applications with guest user access.
• Experienced in configuring Microsoft office365 with Ping Federate.
• Experienced in setting up SAML and OAuth/OIDC applications in Ping Federate.
• Provided L-3 support to resolve the tickets raised by Application teams or clients on various IAM solutions along with PingFederate, AZURE AD and Okta.
• Worked on all the PingFederate OAUTH grant types to get the access token to access the protected API. Supported development with integration of Mobile Apps using OAuth/SAML in PingFederate.
• Experienced in using Postman client for Oauth troubleshooting purposes.
• Experience in working multiple monitoring systems to understand and analyze various logs and reports to provide a more reliable and efficient support for SSO and IDM infrastructure.
• Provided close support to Identity management teams.

TECHNICAL SKILLS:

Federation: OKTA, PingFederate 8.x - 10.x, CA SiteMinder Federation Services, Azure AD

Access Management: Advance access Servers {Okta}, Okta Access Gateway, CA SiteMinder 12.x - 12.8x, CA Access Gateway/Secure Proxy, CA SiteMinder Web Agents, Okta Access Gateway

MultiFactor: Okta Verify, Google Authenticator, PingID and Duo

Web Server: IIS 6.0/7/7.5/8/8.5, Apache2.2/2.4, iPlanet Web Server 6.x

Directory Servers: Microsoft AD, CA Directory Servers R12.x/14.x, Sun ONE Directory Server 5.x, 6.x

Operating Systems: Windows Server 2003/2008/2012/2016/ R2, Red Hat Enterprise Linux 3-7, UNIX (AIX, Sun Solaris 7-10)

PROFESSIONAL EXPERIENCE:

Confidential

Sr. Security Engineer

Responsibilities:

• Implemented many Oauth and OpenID connections based on the client requirements.
• Worked on multiple grants types such as Authorization code, implicit, client credentials and resource owner.
• Worked on supporting and debugging issues and implementing SSO solutions with Business Partners using PING Identity solutions
• Provided Architectural design and implemented enterprise-wide Identity and Access Management (IAM) solutions Ping Federate and PingID.
• Implemented PingID MFA with Ping Federate
• Enforced enterprise-wide work force to PingID for MFA.
• Developed Ping Radius adapter and integrated with different clients which uses Radius (CyberArk, F5, Checkpoint VPN, etc...).
• Worked on a POC in integrating enterprise applications using SAML in azure AD
• Created conditional access to apply business policies as per the requirement in Azure AD.
• Configured external identities to support B2B communication for the guest users.
• Created application proxy for the on-premise web-based applications to provide single sign on.
• Worked on access reviews and self-service signup for guest users.
• Performed access reviews to ensure that the people who have access still require it in Azure AD.

Environment: Ping Federate, PingID, Azure AD, SAML 2.0, WS-FED, OpenID, Multi Factor Authentication (MFA), Microsoft Active Directory, ADFS, LDAP, VMware, Load Balancing.

Confidential

IAM Engineer

Responsibilities:

• Experience in installing Okta’s Lightweight agent to integrate with Active Directory. Configured Microsoft office365 with Okta.
• Have Built and grown strong collaborative relationships with key stakeholders to effectively get their application on board into OKTA.
• IDM related prod implementation like schema extension, environmental changes for change management.
• Provide L3 Production support on the entire IDM System, including user life cycle management of User creation, modification and termination.
• Assist development team in implementing API based implementation and Creating Custom web pages for customer application.
• Deploy Desktop SSO, Just in Time Provisioning, OKTA Mobile Connect (OMC) and Multi Factor authentications
• Integrate 50+ apps (SAML 2.0, WS-FED etc.).
• Setting up SAML applications in OKTA.
• Requirements gathering from application owners, Data analysis for integration and enrichment.
• Performed the configuration, administration, and management of Okta systems, interacting with customers on a daily basis and POC for command center calls.
• Developed custom Open AM authentication modules to connect with multiple backend data stores.
• Configuring authentication and authorization policies for protecting web applications and providing SSO functionality.

Environment: OKTA, SAML 2.0, WS-FED, OpenID, Multi Factor Authentication (MFA), Microsoft Active Directory, ADFS, LDAP, VMware, Load Balancing.

Confidential

Security Engineer

Responsibilities:

• Worked on supporting and debugging issues with and implementing SSO solutions with Business Partners using CA SiteMinder and PING Identity solutions
• Provided Architectural design and implemented enterprise-wide Identity and Access Management (IAM) Solutions Ping Federate and PingID.
• Implemented PingID MFA with Ping Federate
• Implemented Coreblox token service for seamless Single Sign On between Ping and CA / Broadcom.
• Implemented web application OAuth Integrations using Ping federate as Oauth provider.
• Created SP/IdP connections using PingFederate with external partners.
• Involved in failover testing and disaster recovery process and prepared and maintained the documentation for the same.
• Upgraded the SiteMinder Policy Server, Admin UI, and Secure Proxy Server from r .6. Involved in testing the functionality to meet the business units. Extensively involved in troubleshooting issues that arouse in the upgrade process.
• Performance tuning for web server and SiteMinder along with LDAP for better response time, low latency, and high throughput.
• Configured Web Agents on all the web servers and solved the configuration issues using web agent and web server logs.
• Effectively interacted with CA technical support teams.
• Implemented load balancing and failover mechanism for SiteMinder Policy Server.

Environment: Ping Federate 9.0.4, PingID, CA SiteMinder 12.8, CA Identity Minder 14.0, CA Directory 12.6, CA SiteMinder SPS 12.8, Windows 2008 R2, Windows 2012 R2, Red Hat 7.x, Oracle Directory Server, IIS 7.x/8.x, Apache 2.4.x, WebLogic 10.x

Confidential

 Software Consultant

Responsibilities:

• Setup policy servers and web agents and enable SiteMinder Federated Web Services.
• Setup SAML 2.0 partnerships with external applications for federated access.
• Created Policies, Realms, Rules and Responses in SiteMinder policy server to protect the applications and validate the users to work under SSO environment.
• Use Integrated Windows Authentication (IWA) Scheme and Form based Authentication (FBA) scheme for protecting different vendor applications.
• Performance Tuning for SiteMinder to provide better response time, low latency, high availability and maximum throughput.
• Work closely with IDM team to help with Role-mining and design and implement Role based access control for all applications.
• Develop positive relationships with internal/external business partners, seeking opportunities to increase customer satisfaction and deepen customer relationships.
• Develop unit and system test scripts, execute and validate with a high degree of accuracy and completeness and assist the business team with creation of User Acceptance plans and system test plans.

Environment: CA SiteMinder, CA Identity Minder, CA Directory, CA SiteMinder SPS 12.8, Windows 2008 R2, Windows 2012 R2, Red Hat 7.x, Oracle Directory Server, IIS 7.x/8.x, Apache 2.4.x, WebLogic 10.x