Identity And Access Managements Consultant. Resume
AZ
SUMMARY:
- Over 8 years of extensive experience in analysis, design, development, implementation andmaintenance of enterprise wide SSO security with CA SITEMINDER Policy based services.
- Configured CA SiteMinder R12 with Tivoli Directory Server 6.2, SunOne LDAP 5.2 Enterprise Edition.
- Highly experienced in SAML federations using CA SiteMinder R12‘s Federation Security Services SAML 1.1, 1.2, 2.0 / Affiliate agents, Ping Federation Manager. Also hands on experience in Shibboleth 2.1(Setting up both IDP’s and SP’s) and Simple SAML PHP(used for testing purpose).
- Personally supported CISCO’s federation team to integrate with our IDP environment.an Access managements Security specialist, worked on Windows, Solaris Hardening to the core.
- Successfully completed the version upgrades (Upgraded SiteMinder from 6.0 to R12 SP1 and to SP2. Upgraded SunOne LDAP from 5.1 to 5.2).
- Knowledge in Cisco Networking and Big IP Configuration for load balancing purpose.
- Hands of experience in Enterprise Security Strategy, Architectures, Implementation and Production support. Proven experience in setting up SSO environments. Integrated SSO products CA SiteMinder with existing .Net, J2EE applications and middleware applications.
- Created Self Signed and Signed s Signed by CA and using open ssl tool, also knowledgeable in generating and installing s in a Combination of Web and Application Servers.
- Developed POC for HP’s OVPI (Open View Performance Insight) to integrate with CA SiteMinder R 6.x.
- Used ERP Agent Connectors to integrate ERP with CA SiteMinder 6.1.
- Worked on CA SiteMinder and Sun One Directory Server performance tuning (High Availability and Scalability).
- Developed powerful Batch Scripts for basic/ high level usage.
- Worked on Multi - Tired Environment that has all Web/App servers, Security policy servers, different operating systems and its monitoring and performance tuning.
- Strong Conceptual Understanding of Sun’s Identity Manager and hands on experience in Provisioning and De-provisioning and Maintenance of Users.
- Understand the business requirements and leverage the technology to meet delivery goals. Worked closely with top management to assure adequate technical directions are followed and issues are addressed. Oversees design and code reviews and assure adherence to best practices.
- Web Development Technologies, using RAD 6.1(Rational Application Developer)
- Mentored many people in SiteMinder R6/12 SAML2.0, Netscape & iPlanet Products and Object Orientation Analysis and Design, Middleware technology (IBM Web Sphere, Tomcat, and Web logic).
- Supported SiteMinder and LDAP Servers in production environment 24 x 7 basis.
TECHNICAL SKILLS:
Directory Servers & Enterprise Security and Single Sign-On products: CA SiteMinder R12 SP2,5.x/6.0,6.0SP1,SP2,SP3,SP4,Webagent R12 SP2 with Option Packs and ServletExec, SAML 1.x, 2.0,Shibboleth 2.1, Simple SAMLPHP, Ping Federate, PKI’s, APS 4.0, Netscape Directory Server 4.x, Sun ONE/iPlanet Directory Server 5.x, Tivoli Directory Server 6.2
Operating Systems & Databases: Windows Servers (2000, 03, 08), RHEL 4/5, Sun Solaris 8, AIX 5.3, Oracle, MS SQL ServerApplication Severs, Web Servers: IIS 5/6, Apache 2.0 /2.2, Web Logic 10g, Apache Tomcat, iPlanet Web Server, IBM HTTP server, JBoss 5.2,6.x.
Programming: Batch Scripting, Java Scripting in JSP’s and ASP’s. Java, J2EE programming Using RAD 6.1.
PROFESSIONAL EXPERIENCE:
Confidential, AZ
Identity and Access Managements Consultant.
Responsibilities:
- Designed and Architectured CA SiteMinder R12 SP2 Version for Access and Federated Security Services, that includes Configuring Admin UI,FSS UI and Configuring the Policy Server with Session Server, and Audit Databases.
- Responsible for setting up policy servers and web agents for SAML Federated Web Services.
- Worked with SAML 2.0 for Federation between partner web sites.
- Used CISCO’s Life Ray as a portal platform to integrate with the Third Party Vendors.
- Worked & Supported (Staging and Production) with various vendors to create SSO/FEDERATION between our Identity Provider Landing page and Service Provider’s Applications.
- Used Integrated Windows Authentication (IWA) Scheme and Form based Authentication (FBA) scheme with Different vendor’s requirements.
- Worked with Metadata, Entity ID’s and Assertion Consumer Service (ACS) URL to configure SAML 2.0 Federation.
- Developed Custom Java Scripting Pages in Login.FCC to design our own NYCDOE’s Custom built Web Pages.
- Applied Option Packs, Hot Fixes (2007) and Servlet Exec on IIS for Federation with other PHP Products and SAML 2.0.
- Worked with F5 load balancers, that distributes the load to all web agents on a web server.
- Designed CA SiteMinder R12 Enterprise infrastructure and provided high availability by configuring Clusters across two different data centers.
- Configured Tivoli Directory Server6.2 as Policy, User and Key Stores.
- Proficient in Search Filters, performance tuning, Custom Objects, Creating Ldif Files.
- Responsible in Performance Tuning for Siteminder to provide better response time, low latency, high availability and maximum throughput.
- Worked with IIS 6, Apache Web Server2.0.63, SunOne WebServer 6.1 and Configured Jboss App Server to deploy the Admin UI for Policy Server.
- Worked with creating reverse proxies to go through firewalls on partner’s portal environment.
- Provided Roll Back Plans to all the application teams, useful when they need to take off the SSO.
- Coordinated with CA support team to resolve the issues that arise in Production and other environments.
- Provided Weekend Support for Single Sign-On (SSO) Infrastructure in Staging and Production environments.
- Created documentation for Change Requests, Service Requests, and upgrading processes for support purposes.
- Monitored audit and log files.
Skills Utilized: CA SiteMinder R12 Sp2, Webagent R12 Sp2, Tivoli Directory Server 6.2, Active Directory, IIS 6.0, Apache 2.x, SunOne WebServer 6.1, Windows Server 2008, Solaris 2.8, RHEL 4/5, Microsoft VISIO, Servers (DELL, HP and Blade).
Confidential, MN
SiteMinder Consultant
Responsibilities:
- Assigned as Sr. Siteminder Consultant to install, configure, implement and support Enterprise Security and SSO solutions using CA Siteminder and SunOne Directory Servers.
- Installed web agents ERP Agents and created SiteMinder Realms, Rules, Responses and Policies to protect the applications and validate the users to work under SSO environment.
- Configured and Optimized Identity and Access Management for Users using Advanced Password Services (APS).
- Responsible in Performance Tuning for Siteminder to provide better response time, low latency, high availability and maximum throughput.
- Installed and Configured Web Agents for portal applications on Web Sphere’s Portal Server 6.1.
- Designed Siteminder Enterprise infrastructure and provide high availability by configuring Clusters across two different data centers.
- Provided Capacity Planning and Load Balance for Policy Server and Web agent.
- Solved directory problems that aroused in SunOne directory server with Multi master replication in a wide area network Architecture.
- Monitored audit and server log files.
- Coordinated with CA support team to resolve the issues come in Production and other environments.
- Integrated applications from development to production. Assist development teams in identifying and resolving environment-related issues.
- Supported endurance and regression testing in pre production environment for various projects to meet the SLA, Monitored audit and log files.
- Provided 24x7 Support for Single Sign-On (SSO) Infrastructure in development and test environments.
Skills Utilized: Siteminder 6.0 / 6.0 SP3, Agents 6-6qmr5, Sun One LDAP 5.2, Active Directory, Web Sphere 6.1, IIS 6.0, Apache 2.x, Solaris 8, RHEL 4/5, and Win 2003.
Confidential, NJ
SiteMinder & Sun One LDAP Administrator
Responsibilities:
- Assigned as Sr. Siteminder engineer to administer and maintain application security through CA Netegrity Siteminder Single Sign On.
- Upgraded Siteminder from 5.5 to 6.0 SP5 and implemented SSO across multiple domains.
- Created policies, realms, rules, responses in Siteminder policy server to protect the applications and validate the users to work under SSO environment.
- Migrated the Policy Store from SunOne Directory Server 5.1 to 5.2 and configured the Replication over Failover.
- Responsible for Performance Tuning of CA Siteminder and provided 24 X 7 support.
- Installed and Configured Web Agent on IIS 6.0, Apache and SunOne Web Servers and configured the Proxy Connection with Application Server.
- Analyzed the existing configuration and provided the road map to integrate the CA Siteminder with several web applications.
- Designed the CA Siteminder Single Sign On Authentication.
- Developed custom web pages and screens for CA Siteminder Authentication and Response forms using Java JSP & HTML
- Took the initiative and redesigned the LDAP Directory architecture and Schema to implement the enhancements to existing business rules.
- Responsible for resolving all Performance issues while upgrading SunOne Directory Servers from 5.1 to 5.2.
- Re-engineered and designed LDAP Schemas and DIT to implement enterprise wide centralized repository.
- Integrated applications from development to production.
- Assisted development teams in identifying and resolving environment-related issues.
- Provided 24x7 production support with on-call rotation. Co-ordination of Stress & Performance Tests.
Skills Utilized: Netegrity Siteminder 5/6, Sun Solaris, Windows Server 2003, Microsoft IIS6.0, Apache, SunOne Directory Server, and Websphere.
Confidential, NJ
Siteminder / SunOne LDAP Consultant
Responsibilities:
- Worked as a consultant to install, configure, implement and support enterprise infrastructure security solutions and middleware solutions across data centers, this comprises of the Sun One Directory Server and Netegrity Siteminder (Policy sever and the web agents. Installed, Configured and administered Siteminder, Sun One Directory Server.
- Designed and implemented SSO and authentication using Siteminder.
- Implemented password policies for all the applications using Siteminder.
- Involved in performance tuning activities for Siteminder and LDAP.
- Provided level 3 production support for LDAP/Siteminder applications
- Upgraded Siteminder environment from 5.5 to 6.0.
- Redesigned the existing LDAP schema with custom attributes and object classes to accommodate the broker self service application.
- Coordinated with the concerned application teams to have seamless production rollout from staging environment.
- Installed and configured various web agents in accordance with the web servers involved.
- Configured multi-master replication setup in the production environment across multiple data centers.
- Assisted load testing team by monitoring policy servers during load tests.
- Created LDIF files to import data into the Directory server.
- Implemented ACL within SunOne LDAP for delegated Administrative purposes.
Skills Utilized: Netegrity Siteminder policy server 5.5&6.0, Sun One directory server 5.2, Sun Solaris 8, IBM HTTP Server 1.3.19, IBM HTTP Server 2.0.47.
Confidential
Software Developer
Responsibilities:
- Migrated / converted business logic for Web Request system from a client-server basedapplication to a 3-tier web enabled system based on JSP architecture
- Written java applications (JSP) for IBM Web sphere Application server 5.0
- Developed, designed and deployment of Java server pages, Java Servlets, XML, XSLand Java beans
- Developed XML documents, XSL sheets in PDF format
- Established database connection with JDBC using data sources and connection pooling
- Programmed accounting functions such as account receivable, accounts payable
- Deployed JSP files to generate Order Entry, Inventory tracking reports
- Created several JSP, Java Beans and custom tag lib for front end designing of the website
- Used Java Script for client side validations
- Involved in Website Design of the application
- Involved with database design including tables and fields using normalization principles and Entity relationship diagrams
- Involved in SQL coding to manipulate the data within the database
Skills Utilized: J2EE, JDK 1.3, WSAD 5.x, Websphere5.x, Tomcat 5.x, Servlets, EJB XML, XSL,, UNIX, CVS
