Lead Java Security Consultant Resume
Plano, TX
SUMMARY
- 10 years of experience in Software Design and Development of Java/J2EE Web and strong security step - up authentication based VPN access solution applications
- Hands on experience in using CA Security Suite (i.e., AuthMinder (web authentication), RiskMinder (Online risk evaluation)) and Tivoli IDM to manage overall Identity and Access
- Worked for major web Security, Financial, Banking and Insurance Institutions Computer Associates, Confidential & Confidential, Confidential Bank, Confidential Bank, Confidential and Confidential
- Developed solutions for Enterprise/Ecommerce Advanced Authentication, Online risk evaluation (secure transaction) and Single Sign-On implementation involving in re-architecture of Security platform for ecommerce applications.
- Thorough understanding and experience of developing Java/ J2EE applications deployed on JBoss, WebSphere, WebLogic and Tomcat environments
- Knowledge of Software Engineering practices (SDLC)/methodologies to be used during different phases of Software life cycle / Bug life cycle.
- Working knowledge of Application which uses Business Process Modelling / Work flows using WebSphere, WebLogic, JBoss and Work Point environments
- Involved in the Project Requirement Specification analysis discussion, developing project plan, developing build schedule for QA team. expertise on Object oriented concepts and Design Patterns
- Experience in developing Message/JMS based applications and using WebLogic and WebSphere based products
- Expertise on JBoss Rule Engine (Drools), JSF, Struts and Spring MVC, Hibernate frameworks
- Designed and developed Web Services & Restful Services using Apache Axis (1 and 2) & Spring and good understanding of JAX-RPC, SOAP and WSDL
- Working knowledge of using Oracle, MySQL, SQLServer and DB2 relational database systems
- Working knowledge of developing applications using Security Assertion Mark-up Language (SAML), Expertise on Object oriented concepts and Design Patterns
- Experience in Performance Tuning and post development activities
- Worked in web Security, Financial, Banking, Insurance and Content Management verticals
- Experience in Agile and waterfall development Methodologies
- Proficient in ANT and Maven scripts for creating development and deployment environment
- Hands-on experience with various source code management tools such as GIT, SVN, MKS Integrity, Win CVS and PVCS
- Sound Knowledge on designing applications using industry standard modelling and processes
- Excellent communication skills and good analytical and problem solving skills
TECHNICAL SKILLS
Language: Java/J2EE, C, C++
J2EE Technologies: Servlets, JSP, JSF, XSLT, XML, EJB, JDBC, JNDI, RMI, JSTL, JPA, JTA, Design Patterns
Scripting Language: HTML, JavaScript, Cascading Style Sheet
Frameworks: Spring, Struts (1.x and 2), Hibernate
IDE & Development Tools: Eclipse, Net Beans, SOAP UI, Rich UI Framework, JForm Designer
RDBMS: Oracle, DB2, MySQL, MS SQL Server
Build Platforms: ANT, Maven
Application Servers: WebSphere Application Server, WebLogic Server, JBoss Application Server, Tomcat Application Server Web Authentication, Online Risk evaluation (security) Management CA AuthMinder, CA RiskMinder, Arcot ID soft token authentication solution, Secure vpn access authentication solution, AFM (Multiple web authentication flow manager)
Management Platform: CA Siteminder, Tivoli Identity Manager
Integration Technologies: Business Process Modeling (WebSphere Integration, WebLogic Platform and JBoss jBPM), WebSphere MQ, Java Message Service, Web Service (AXIS and AXIS2), SOAP and RESTful Services using JAX-RS and Spring Framework
Source Control: Microsoft VSS, Win CVS, MKS, GIT, SVN
Development Process: Agile, Waterfall
Rule Engine: JBOSS Drools
Protocols: TCP, UDP, SAML and Radius protocols
Operating System: Windows, Linux, Unix
PROFESSIONAL EXPERIENCE
Confidential, Plano, TX
Lead Java Security Consultant
Responsibilities:
- Implementing ecommerce Security strategy, standards and developing architecture aligning with Enterprise Architecture guidelines
- Online Risk evaluation: Rules implementing and risk calculation implementation using authentication flow manager application and customization.
- Two-factor strong authentication completely in software
- Desktop OTP implementation for EY employee device locking mechanism
- Implement start-up scripts for E&Y environment to start the security suite with server boot-up.
- Involved in requirements gathering and analysis of current system.
- Preparing Solution Design Specification: (including Identifying Actors & Roles, Segregation of Duties, Work flows, Step up authentication, and Provisioning to downstream applications)
- Involved in unit testing, resolving issues & defects. Performed code reviews of team members
Environment: CA Security Product Suite (RiskMinder, AuthMinder, Siteminder/SSO 12.52, RSA ARcot ID AA), Java, JSP, HTML5, Desktop OTP Client, Redhat Linux, Windows 2012, SAML, SOAP/RESTful services and IIS
Confidential, Westbury, NY
Java Security Consultant
Responsibilities:
- Secure VPN Access: AFM adapter customization with customer requirements
- Enrollment Authentication: Secure one-time-passcode generator that runs on your personal email for step up authentication.
- ArcotId Generation: Two-factor strong authentication completely in software.
- Multifactor Authentication: Versatile Authentication providing multiple authentication methods including ArcotID and IDM QnA authentication
- Development of High Risk Transaction Implementation for various Transactions
- Design and development of monitoring tool
- Developed CSS style sheets and Javascript functions for frontend validations
- Developed Web Services client for connecting to IDM for fetching the user existed QnA
- Enhanced existing enterprise application and developed custom stored procedures for a subcomponent of the enterprise application, IBM TIM/TAM
Environment: J2EE, JSP, Oracle, Axis2 Web Services, SoapUI, CA AuthMinder, CA RiskMinder, LDAP, IDM, WinXP
Confidential
Java Security Developer
Responsibilities:
- Secure VPN Access: Build corporation’s remote access requirements while preventing fraudulent access to any corporate assets.
- Make it convenient for employees, customers and partners to authenticate.
- Mobile Authentication: Secure one-time-passcode generator that runs on your mobile phone.
- ArcotId Generation: Two-factor strong authentication completely in software.
- Multifactor Authentication: Versatile Authentication providing multiple authentication methods including ArcotID and ArcotOTP
Environment: Java, JSP, HTML, JavaScript, Tomcat6, Oracle, Axis2 Web Services, SoapUI, CA AuthMinder, CA RiskMinder, Linux, Win2003
Confidential, Boston, MA
Java Organizer Consultant
Responsibilities:
- Creating custom container configuration validations with Jboss rool engine.
- Interaction with Client to understand the business requirements.
- Understanding the functionality of the project modules.
- Involved in technical design of the Product rule engine module.
- Involved in complete development of CAT coverage’s, and Location Details modules.
- Involved in preparation of Unit test plans & involved in coding development for the modules.
- Involved in unit testing, resolving issues & defects.
- Performed code reviews of team members.
- Followed all the processes and standards set for the project.
- Developed Action Classes which are part of controller class.
- Co-ordination with onsite tech lead & Liberty team members.
- Provided Technical & Functional guidance to the team members
Environment: Java 1.5, J2EE, Servlets, JSP, Struts 1.1, Oracle 9i, Web logic 7.1, Jboss drools Rule Engine
Confidential
Java Engineer
Responsibilities:
- Execute command line tools for auto scaling.
- Understood the overall system
- Developed User Interface (UI) using Rich UI Framework & JForm Designer.
- Under standing the functionality of the New Business, Charges, Underwriting modules
- Developed charge calculations and commissions for the agent and for the client
- Preparing Unit Test Plans (UTP)
- Responsible for Unit Testing.
- Responsibility to build the entire application without any issues.
Environment: Java 1.5, J2EE, Servlets, JSP, Struts 1.1, Oracle 9i, OC4J, JForm Designer, ESB & Rich UI Frame work
Confidential
Java Engineer
Responsibilities:
- nvolved in functional and design document.
- Involved coding and review of the system.
- Interacting with client development team for overall understanding of the
- Product architecture and the scope of the customisation.
- Developed User Interface (UI) using JSPs and Struts Framework.
- Bug fixing for that Iteration.
- Responsible for Unit Testing
Environment: J2EE, Java 1.5, Servlets, JSP, Struts 1.2, Oracle 9i, Tomcat 5.5
Confidential
Java Developer
Responsibilities:
- Developed GUI using Struts frame work and using JSP tags.
- Developed Form Beans, which are used to hold current user data.
- Developed Action Classes which are part of controller class.
- Created data access objects using JDBC to access the database.
- Created build scripts for compiling and creating war, jar and ear files using ANT tool kit.
Environment: Java 1.4, Servlets, JSP, Struts 1.2, EJB 2.0, Oracle 9i, Tomcat 5.5. Eclipse 3.1
