SUMMARY:

• Over 6+ years of experience in design, development, testing, implementation and operational support for CA Confidential and Federation SAML2.0 with Sun/Oracle LDAP, Active Directory, CA Directory, Oracle DB and other Oracle and IBM products on Unix, Linux and Windows platform
• Expert in configuration of rules, realms, requests and domain policies associated with it.
• Expert in implementation and operational support of security utility for enterprise wide security applications with authentication, authorization, accountability and federation features.
• Expert in setup of policies for Federation Integrations.
• Expert in troubleshooting using log files from policy server logs, web agent logs, webserver logs, policy dumps, smtest tools, policy analyzer
• Have a hands - on experience on OAuth, Federation and MFA technologies.
• Have good Analytical abilities.
• Experienced in operational support for Java EE applications and web services in WebSphere 6.x
• Experienced in architecture design, installation, configuration and performance tuning of CA Siteminder, Federation Security Services and webagents.
• Experienced in Authentication, Authorization, Accounting and Administration using Confidential and rules, realms, requests and domain policies associated with it
• Experienced in renewing federation SAML2.0 certificates, setting private keys
• Knowledge on SAML 2.0 certificate signing.
• Experienced in troubleshooting using log files from policy server logs, web agent logs, webserver logs, policy dumps, smtest tools, policy analyzer
• Experienced in migration of end of life CA Confidential software and hardware platform to CA Confidential 6.x and 12.5 and CA Confidential 12.5 to CA Confidential 12.52
• Knowledge on Oracle LDAP Directory configuration, administration, multi-master and master-slave replication setup
• Knowledge on CA Directory configuration, administration, multi-master replication setup.
• CA Confidential webagent migration to supported platform of UNIX, Linux and windows.
• Operational support for seamless authentication solution using CA Confidential and NTLM authentication scheme
• Integration of custom APIs with Confidential authentication and authorization.
• Experienced in implementation of CA monitoring tools for Siteminder, webagents and CA custom monitoring tools
• Experienced in installation of webagents in apache IHS webservers and Windows IIS servers
• Basic knowledge on Oracle 10g and 11g two-node RAC cluster
• Expertise on Oracle Goldengate replication strategy and collision detection
• Experienced in implementation of Oracle Goldengate-Veridata data comparison tool.
• Experienced in Java and JEE web application development using Struts web framework and Hibernate technologies
• Experienced in Oracle schema and SQL queries
• Experienced in implementation of Selenium automation suite for application testing.
• Hands-on experience in SOAP UI for web services testing.
• Experienced in CA Service Operations Insight (CA SOI) installation, building services and testing the setup for centralized monitoring.
• Experienced in JMeter testing tool for load testing.
• Experienced in Valgrind memory management analysis tool.
• Expert in HP sitescope monitoring setup.
• Expert in AppviewX monitoring setup.
• Expert in analyzing and recording network packets using Wireshark.
• Expert in operating AppviewX, F5 console and Command Line Interface.
• Knowledge on VMware tools such as Vcenter, DRS, ESX hosts and mobility boundaries.
• Knowledge on the functionality of InAuth, Transmit Security
• Knowledge on Shape shifter to prevent from DDOS and BOT attacks.
• Experienced in fraud detection tools, InAuth for Device finger printing.

TECHNICAL SKILLS:

Access Management: CA Confidential 4.x, 5.x, 6.x and 12.x, CA Federation (FSS), SAML2.0, SAML Certificates, WebAgents and JavaAgents for IBM Websphere, Windows

Directory Servers: Oracle LDAP, Microsoft Active Directory

Middleware: IBM Apache Webserver, IIS 5x/6x, IBM Websphere, Tomcat, Azure Cloud

Database: Oracle 10g, Oracle 11g

Data Integration: Oracle Goldengate, IBM Directory Integrator

VMware, F15k, HP DL: 580, EMC SAN Arrays, AIX, Windows, Linux, Solaris, F5 load balancers (LTM and GTM), AppViewX

Monitoring Tools: HP Sitescope, BMC, CA APM (wily), CA Spectrum, CA ADA, Oracle Goldengate Veridata, CA SOI, Vcentre, Keynote, Gomez

Testing tools: Selenium, SOAP UI, Performance Center, JMeter

Analysis tools: Valgrind, JAnalyze

Threat and Fraud Detection and Analysis tools: Transmit Security, InAuth, Shape Shifter .

PROFESSIONAL EXPERIENCE:

Confidential, Phoenix, AZ

Responsibilities:

• Device identification / recognition (DFP)
• Device characterization
• Proxy piercing
• Device integrity metrics
• Malware detection
• Rooted device detection
• Jail broken detection
• Mobile emulation
• Debug mode
• Decision
• Risk scoring
• Installation of the3rd party product On Prem in all environments (Dev, QA and Production)
• Working with system administrators to install the software.
• Collaborated in configuring a test application to mitigate the user experience.
• Configure monitoring tools like HP sitescope, CA APM, Gomez
• Working with database team to configure tables and configuring OEM alerts.
• Troubleshooting issues during installation
• Working with vendor on fixes and vulnerabilities.
• Performing Stress, load, Stability, failover and break testing to check the performance of the system.
• Integrating with other applications in Confidential
• Knowledge sharing to the entire team of around 70+ people and making them ready for support activities.
• Collaborated in configuring GTM and LTM for the application with Confidential network team.

Confidential

Responsibilities:

• Migration of Confidential and Federation 12.5 to 12.52 CR1 SP1 for Confidential .
• Collaborated in the architecture design of Confidential 12.52.
• Collaborated in analyzing the type of testing required.
• Assisted in creation of UNIX user id, installation directories and log directories.
• Collaborated in installation of JDK for CA Siteminder
• Collaborated in creation of DSA for policy store, keystore and Session store and logging setup.
• Configuration changes in SMconsole for authorization logging settings and connection settings
• Configuration of policy store, key store and session store in CA Confidential policy server and importing data definition into directory server.
• Installation, validation and registration of Confidential admin UI on the server.
• Implementation of multi master replication setup for CA directory and directory failover setup in policy server.
• Implementation of oneview monitor for policy servers.
• Collaborated in setup and designing flows for Federation (SAML2.0) for Confidential Single Sign On application.
• Procuring new Certificates with a Private key and installing on Confidential server for Federation SAML
• Renewing the Federation certificates for Stack Federation from one domain to other.
• Updating and renewing the SAML2.0 Certificate with serial number and issuer DN during uplift.
• Signing certificates updates using Public Key Infrastructure.
• Exporting and importing multiple keys for Federation SAML.
• Integrating with third party vendor applications using federation SAML2.0 for outbound and inbound.
• Analyzing the quality and risk with different testing like Load, Stress, stability, regression, break, Failover and Memory leak.
• Handling changes among multiple environments like Dev, test and Production for multiple stacks.
• Assisted in migration of custom components to CA Confidential servers like WebAgent optional pack.
• Creating multiple monitors for better monitoring with multiple tools, CA SOI, CA APM, Sitescope, IBM Tivoli, CA Spectrum.
• Reviewing the Documentation.

Confidential

Responsibilities:

• Collaborated in Confidential for Confidential .
• Collaborated and participated in discussion with Fraud and Threat detection experts from multiple vendors
• Collaborated in analyzing multiple tools for threat analysis and detection.
• Analyzed tools like InAuth, Transmit Security and Shape Shifter.
• Collaborated in procuring multiple servers for analysis and understating the flows.
• Collaborated in connecting multiple tools to oracle database for authentication.
• Performed multiple rounds of testing to understand the risk.
• Collaborated in building the setup for Shape Shifter under F5 load balancers for protection from DDOS and BOT attacks.
• Collaborated in analyzing and reviewing the documentation from multiple vendors
• Collaborated in validating and authenticating flows using Confidential and saml2.0
• Collaborated in analyzing the threat from mobile devices and suggesting the solutions.
• Analyzing the risk of bringing down the load balancers and suggesting the best approach.
• Collaborated in providing access to multiple teams for analysis.

Confidential

Responsibilities:

• Worked as a Technical Lead for building the shared keystore project for multiple domain in Confidential .
• Collaborated in discussing with CA on risk analysis and deciding on a low risk approach.
• Collaborated in building the architecture plan.
• Configuration of key store in CA Confidential policy server, exporting and importing data definition into directory server.
• Worked in creating a new instance in separating the keystore from Policy store.
• Configuring keys for multiple keystores with Dynamic keystore approach and performing rollovers.
• Collaborated on performance analysis for the SSO application.
• Performed multiple test like Load, Stress, Stability, regression and memory leak testing by JMeter for functional and quality testing.
• Configuration changes in SMconsole for kesytore ports.
• Proactive measure to decrease the outage for multiple critical supported applications in Confidential .
• Testing of multiple flows for seamless authentication.
• Collaborated in reviewing the documentation for better analysis.
• Testing the functionality of Confidential policyserver with multiple use cases across Confidential .
• Handling and resolving multiple issues during the uplift.
• Collaborated in creating and analyzing the monitors in different monitoring tools like APM, SOI, Sitescope.

Confidential

Technical Lead

Responsibilities:

• Centralized monitoring of all minoring tools in one dashboard.
• Collaborated in discussions of project setup and initiation.
• Identifying the project risks and issues.
• Collaborated in reviewing of technical requirements, Goals, business model, functional requirements, quality attributes, and solution constraints.
• Collaborated in documenting solution requirements.
• Collaborated in reviewing solution functional design development, technical design development, solution test plan documentations.
• Collaborated in reviewing the documentation helps in monitoring the Confidential policy servers.
• Verifying server configuration, network connectivity between Domain managers and SOI.
• Installation of Business Intelligence, EEM, SOI Manager, CA SOI User Interface and Reports.
• Installation and configuration of CA Spectrum Connectors, CA Application Performance Management connector, SNMP connector for HP Sitescope and CA VAIM connector to connect to Vcentre, SNMP connector for Oracle Enterprise Manager.
• Configuring Gomez to SOI though Application Performance Management.
• The Application performance manger is the tool which analysis the metric including the Siteminder.
• Verifying availability of configuration items from Domain Managers.
• Configuring mail server for Email notifications.
• Configuring report server, User Synchronization and Single Sign-On for reporting.
• Configuring Users, Groups, Access Rights and preferences and assigning User to User Groups.
• Importing and verifying IT Services from Domain managers.
• Configuring reporting schedule for Out-of-the-Box reports.
• Building the services in SOI for multiple applications.
• Collaborated in Functional and Integration testing, Use case testing, Quality Assurance reviewing.
• Deployment of the connectors in production after successful testing.
• Preparing and reviewing the documentation.
• Transition on using the built services and reports to other team members and other teams.

Confidential

Technical Lead

Responsibilities:

• Modularized software for configuring of all F5 load balancers onto the dashboards.
• Collaborated in discussions of project inputs and reviewing technical requirements
• Gathering required information for building dashboards.
• Configuring mail server for email notifications.
• Building dashboards for multiple applications for takings servers In/Out of rotation from F5 Load Balancers without logging into F5 Console.
• Collaborated in adding and managing the network devices, configuring the report generation for detailed view of actions, setting up the archives of the data for AppviewX.
• Collaborated in Configuring the role's certificate access control permissions.
• Collaborated in configuring the traffic grid widgets with multiple color options for easy understanding of the health.
• Collaborated in setting up the rules and restriction based on user role.
• Creating the dashboards for taking control on Global traffic Manager and Local Traffic Manager Monitors.
• Collaborated in functional and Quality Testing.
• Building dashboards in production after the successful testing.
• Collaborated in documentation review.
• Transition to other team members in using the dashboards for day-to-day use.

Technical Lead

Confidential

Responsibilities:

• Operational Tech Lead for SSO Utility applications, Federation, OAuth and MFA.
• L3 troubleshooting using log files from policy server logs, web agent logs, webserver logs and using policy dumps, smtest tools, policy analyzer.
• Responsible for leading and mentoring an offshore development team of 40+ members.
• Role assignment to team members and proactive monitoring of application.
• Documentation of impacts with root cause and update the known error database with workaround.
• Assistance to implementation of fix and track till closure.
• Documentation of enhancement requests and assigning the request owner to work on the enhancement.
• Knowledge sharing among team members on SSO Utility.
• Collaborated in day to day operations of SSO Applications.
• Identifying known issues in production environment and providing workaround
• Troubleshooting known issues, identifying fix and implementing them in Dev, Test and Prod environments
• Collaborated in identifying known Confidential issues with Confidential 12.5 and working with CA to provide a Need-It-Now release.
• Developed workaround till the identified know issues are fixed.
• Collaborated in the Change Authorization Board for SSO applications. Collaborated in detailed analysis of the changes and reviewing the test results and providing the sign-off for production releases.
• Collaborated in developing Service Transition and Operational procedures for enhanced and high availability application support model.
• Configuring Confidential policies for Single Sign on.
• Configuring Federation SAML2.0 Policies to integrate to third party vendors for IDP and SP.
• Export and import of Multiple store keys like Policy store, Keystore and Session Store.
• Collaborated in design and implementation of CA Application Performance Management (APM).

Confidential

Responsibilities:

• Assisted in Migration from end of life Confidential 6.x to Confidential 12.5, virtual server provisioning based on capacity needs, setting up the affinity rules in ESX hosts.
• Collaborated in setting up of UNIX user profile, installation directories for CA Siteminder, CA directory.
• Collaborated in installation of JDK for CA Siteminder.
• Installation and validation of Sunone webserver and setting up the start and stop scripts.
• Installation and validation of new Atlanta Servlet on the SunOne directory
• Installation of Confidential 12.5 and setting up of the XPSSecurity and smreg host and updating the unix profile with the environment variables.
• Collaborated Provisioning virtual servers for CA directory policy store.
• Collaborated in installation of directory server on the predefined directory and updating the dsa profile.
• Collaborated in creation of DSA for policy store and keystore and logging setup
• Configuration changes in SMconsole for authorization logging settings and connection settings
• Configuration of policy store, key store and session store in CA Confidential policy server and importing data definition into directory server.
• Implementation of policy migration from Confidential 6 to Confidential 12.5 using smobj export and XPS import
• Installation, validation and registration of Confidential admin UI on the server.
• Implementation of logs directory with required tracing for Confidential logs and archival settings.
• Migration of custom components from Confidential 6 to Confidential 12.5 servers.
• Implementation of multi master replication setup for CA directory and directory failover setup in policy server
• Implementation of oneview monitor for policy servers
• Assisted in configuring load balancers for policy servers
• Installation of wily monitoring agent on Confidential server and configuring them in Enterprise Manager. Setup of alerts and dashboard.
• Testing of Confidential 12.5 with various type of application integrations such as Auth/AZ integrations, federation, NTLM seamless authentication

Confidential

Responsibilities:

• Implementation of Testing features for SSO utility.
• Collaborated in developing the testing framework and identified Key Performance Indicators such as authorization, authentication parameters for Siteminder.
• Collaborated in setup of log parser scripts to identify the unique webagents and capacity/load in Confidential servers and leveraging CA Wily data for in house features.
• Implementation of SMtest tool validation, recording the test flow and re-configuration to use them for load testing.
• Assisted in implementation of JMeter tool and configure to run test pages and load test with regular and abnormal traffic patterns.
• Assisted in implementation of Valgrind tool to identify the memory leak in SSO Websphere component.
• Developing the Selenium automation browser testing suite on the Test NG framework for various flows.
• Test the flows on the Selenium RC server and generate report.

Confidential

Responsibilities:

• Migration of User store from Oracle 10g to Oracle 11g database.
• Assisted in architecture the hardware needed for migration, such as, number of NIC cards and HBAs.
• Assisted in calculating the storage and number of disk paths needed.
• Assisted in support of database installation, setup of instances and cluster configuration.
• Assisted in migration of data from Solaris Oracle 10g server to Oracle 11g using transportable tablespaces.
• Collaborated in installation of Oracle Goldengate on 4 Oracle databases, assisted in creation of schema for Goldengate user.
• Preparation of obey files to create the trail directories, trace tables, extract, pump and replicate process and run them to creation of extract, pump and replicate process in Oracle clusters.
• Configuration of extract, pump and replicate process and initialize replication between databases.
• Collaborated in implementation of the migration approach needed for migrating the data across databases using the transactional tablespace and delta replication using Oracle Goldengate.
• Collaborated in setting up of Collision Detection and Recovery configuration to address data collision between databases during replications.
• Collaborated in installation of Veridata agent on the Oracle databases and setup of manager process on pre-defined ports.
• Collaborated in configuration of groups and compare pairs for data comparison between Oracle databases.

Confidential

Responsibilities:

• Migration of Confidential 6.x from physical platform to virtual platform to reduce cost and availability.
• Assisted in architecture design of Confidential 6.x in virtual platform by including load balancers for faster migration activity.
• Assisted in procurement of virtual servers and setting up affinity rules with ESX host.
• Assisted in creation of Unix user id, installation directories and log directories
• Collaborated in installation of JDK, sunone webserver and servletExec on the server.
• Collaborated in installation of CA Confidential and oneview monitor on the install directory and configuration of CA Confidential 6.x with policy store.
• Assisted in installation and configuration of Oracle LDAP directory and running the smldapsetup to setup policy store schema
• Collaborated in export of policies from existing version of policy store to new policy server using smobjexport and smobjimprt utility
• Assisted in migration of 200+ applications to use load balancer FQDN to connect with CA Confidential servers.
• Assisted in migration of custom components to CA Confidential servers.
• Implementation of logs directory and required tracing for Confidential trace logs for troubleshooting purposes.
• Testing of Confidential 6.x with various type of application integrations such as Auth/AZ integrations, federation, and NTLM seamless authentication.
• Assisted in implementation and testing of Tivoli end point monitors for VM and ESX host issues.

Confidential

Technical Engineer

Responsibilities:

• L1, L2 troubleshooting using log files from policy server logs, web agent logs, webserver logs and using policy dumps, smtest tools, policy analyzer
• Assisted in code deployment and validation on Websphere servers and custom application servers.
• Assisted in single user incidents and provided them work around for the issue.
• Assisted in web certificate renewal on the web servers and web load balancers
• Collaborated in implementation of perl and shell automation scripts to remove servers from service and place back in service.
• Collaborated in Service maintenance of SAML certificate renewal for federated applications.
• Assisted in automation of application server health check using Java Swing and shell scripts.

Confidential

Responsibilities:

• Reporting and Notification website for Utility Operational support group
• Collaborated in analysis and requirements gathering for the website.
• Collaborated in the design of the portal using java web framework and Oracle Database.
• Collaborated in developing a reporting application using Struts 1.3 framework and combination of hibernate and Java SQL component
• Implementation of JSPs using the Tiles component, Validation components for forms and CSS for look and feel.
• Implementation of Javax mail utility to send dynamic email from the website and setup of log4j logging features for troubleshooting.
• Implementation of struts layout for dynamic form update.
• Collaborated in performing the code analysis using JAnalyze tool and implemented the recommendation.
• Implementation of Authentication and Authorization using Action Filters.
• Developing the Schema and tables using Oracle SQL.