SUMMARY:

Looking for a challenging position in a company that will leverage my 8+ years ‘Solutions Designer’ experience using identity and access management technologies. Identity and Access solutions implemented for: Healthcare and Health services, Banking and Financial, Federal Government and other Confidential 100 clientele.

TECHNICAL SKILLS:

Operating Systems: Unix (Solaris & HP - UX), Win 98/2000/XP/NT/2008, PALM OS, SuSe Linux, VMWare, Oracle RHEL 4/5/6, RedHat

Version Control: Merant PVCS, Computer Associates HARVEST, CVS, Visual Source Safe, Jenkins, SVN

Content Management: Vignette V/5, V/6, V/7 Microsoft CMS, Interwoven TeamSite & Worksite, Oracle Web Center, Oracle Universal Content Management.

Web Servers: Apache, iPlanet, Oracle HTTP server, Jboss EWS

Identity and Access Management: Oracle Identity and Access Management 11gR2, RSA Authentication Manager 8.1, CA SiteMinder Secure SSO, Oracle Entitlements Server 11g, Oracle API Gateway 11g, Oracle Enterprise Single Sign on, Oracle Adaptive Access Manager 11g, PingFederate

Application Servers: Weblogic 11gR2, Jboss EAP 5/6, OC4J, Oracle 9iAS and Oracle 10gAS

EXPERIENCE:

Confidential, Consortium, NYC

OIAM SME

Responsibilities:

• Creating design diagrams and layouts
• Obtain business approval by demonstrating design
• Technical implementation and integration activities:
• Document and map each OIAM component to functional requirements.
• Install Oracle Universal Directory to provide LDAP based user store for all OIAM components as well as web application layer.
• Configure Oracle Virtual Directory (OVD 11g) to provide layer of abstraction in front of OUD based LDAP store
• Install and configure Oracle Identity Manager (OIM 11g) to be used for User Management functionality via integration to OUD for user data.
• Install and configure Oracle Access Manager (OAM 11gR2)
• Oracle Webgate 11gR2 protection for web application layer hosted on Jboss EAP 6.1 via reverse proxy hosted on Oracle HTTP server
• Install and configure Oracle Entitlements Server (OES 11gR2) for fine grained and programmatically generated entitlements
• Install and configure java based client for OES
• Install and configure the web-services client for OES
• Deploy and customize “People” app for use with client web application tier.
• Install and configure Oracle API Gateway (OAG 11g) to provide protection for SOA and REST services hosted on Jboss EAP 6.1
• Install and configure Oracle Enterprise edition database in RAC mode for use by OIAM components
• Configure OIAM repositories using Oracle Repository Creation Utility (Oracle RCU)
• Performance tuning for all components of the OIAM stack as well as database tier
• Upgrade OIAM stack from PS2 to PS3 in all environments
• Install and configure RSA/EMC Authentication Manager 8.1 to provide multifactor authentication
• Deploy and configure web application AVESKA for administration of RSA product
• Implement PingFederate for third party integrations coming into current client site.
• Implement alternate federated SSO using RSA ClearTrust Federated Identity Management and RSA ClearTrust Web Access Management for in-domain users
• Upgrade of OIAM stack from 11gR2 PS2 to 11gR2 PS3
• Plan the update of OIAM binaries
• Plan and update DB schemas for OAM, IAU and OPSS
• Upgrading system configuration
• Post upgrade checks and testing

Confidential

OIAM Architect

Responsibilities:

• Architecture planning and design for OIM 11gR2 implementation from DEV all the way up to PROD and Disaster Recovery environments - including:
• Install and configure OIM 11gR2, SOA, OIA and BI
• Various functions in the deployment of following connectors:
• Active Directory
• Peopesoft HR
• CA Top Secret
• RSA
• Flat file
• Integration with Salesforce for Communities and Portal
• Use data loader to create accounts
• Ongoing provisioning of users using SF Webservices for account creation
• Used data loader to upload user profiles that will be used by PING federate for SAML authentication to 3rd party vendors.
• Development support for client development staff including:
• Design and development guidance
• Troubleshooting complex issues
• Performance tuning of entire architecture
• Interface with Oracle Support on service requests, bug fixes and one of patch requests and testing
• Migration of 3rd party partner from Oracle ESSO 10g to OKTA SSO
• Install Configure OKTA Desktop Installer
• Use SSOLWA.EXE to complete install
• Configure IIS for OKTA Management Service
• Configuration for enablement of Integrated Windows Authentication
• Install and configuration of OKTA AD server agent
• Configure OKTA AD password sync
• Reconfiguration of SSO policies for various Applications.
• Logging and Monitoring of IAM stack
• Configurations created for HP OpenView
• Monitoring of logs for errors, exceptions
• Interview, Hire, Train new team members and client staff
• Provide 24x7 support
• Provide weekend and off peak on-call support
• Provide CRITICAL incident management and support
• Implement third-party SSO using Oracle Identity Federation 11g as well as PingFederate SSO. Both using SAML 2.0 standards.

Confidential, Nashville, TN

OIAM Team Lead

Responsibilities:

• Design and implement OIAM infrastructure using industry best practice for use by over 2 million direct and federated SSO login users.
• Install and configure OID 11g. 2 nodes with replication between both nodes. OID configured to use a RAC based metadata repository
• Install and configure OVD 11g. 2 nodes with adapters for OID, AD and Database join adapter.
• Install and configure OAM 11g Identity/Access servers for direct and policy based authentication schemes
• Install and configure OIF 11g and configure both Identity Providers and client as Service Provider. With OAM for post sso policy lookups
• Configure multiple ISPs by exchanging metadata, certificate import to configured trust store, import metadata to create federations.
• Same as above for where client acted as a ISP for others that were SP.
• Test and review incoming SAML assertions and logs for data issues
• Performance tune OIF and federated SSO transaction
• Integration of OIM 10g with Salesforce
• SPML connector used to create users in Salesforce both on the fly as well as in batch mode.
• Interview, Hire, Train new team members and client staff
• Provide 24x7 support
• Provide weekend and off peak on-call support
• Provide CRITICAL incident management and support
• Performance tuning for OID database
• Performance tuning for OAM and OVD

Confidential, Palo Alto, CA

IDM Architect

Responsibilities:

• Design a “highly available (HA)” architecture for the entire IDM stack with redundant FMW layers and application server clustering
• Design a redundant database layer for all repositories by implementing Oracle RAC
• Responsible install and configure of
• Oracle Fusion Middleware
• Oracle Internet Directory (OID)
• Oracle Access Manager
• Oracle Virtual Directory
• Oracle Federation Server
• Configure DIP to integrate with MS Active Directory including synchronization of users and groups
• Configure Windows Native Authentication
• Integrate OID and OAM to provide WNA all the way through eBusiness. Using OIF for external users first.
• Build and maintain install and configuration documentation
• Train end client administrators on day to day maintenance and configuration management activities.

Confidential, Bentonville, AR

IDM Solutions Designer

Responsibilities:

• Responsible install and configure of ESSO Admin Console
• Responsible for authoring/configuring ESSO Global Agent settings
• Configure AD as a repository for ESSO application and end user profile data
• Generation of ESSO-LM client MSI
• Create phased strategy for deployment of ESSO to over 300,000 users at Walmart
• Installation and configuration of SSPR server side
• Install/Configure with IIS
• Configuration of AD repository
• Configuration of secret questions
• Configuration of replication between AD instances
• Responsible for generation of SSPR client MSI
• Responsible for creating deployment strategy for over 300,000 Walmart end users
• Training materials prepared and hands on training provided to client Admins and Account administrators

Confidential, Los Angeles, CA

IDM/SOA SME

Responsibilities:

• Performance tuning of SOA 11g environments (Linux/Weblogic/Oracle RDBMS)
• Handle various trouble tickets ranging from performance of services to strengthening of “High Availability” configurations
• Liason between Oracle Support and client administrators on SEVERITY-1 issues to resolve open issues
• Performance tuning/upgrade/patching of OIM 11g environments
• Configure Oracle Identity Federation (OIF) and integrate with outside partners using SAML 2.0 as well as Microsoft Windows CardSpace in relying party (RP) mode and authentication provider (AP) mode.
• Setup Oracle Enterprise Manager across ENTIRE infrastructure and provide operational monitoring of server status, adapter status, system status including CPU & Memory utilization. Single dashboard view of entire deployment topology and server status including all Oracle Fusion Middleware components, databases, and applications (For multiple PROD and PRE-PROD environments)
• Install/Configure Oracle Adaptive Access Manager “OAAM”
• Configure Adaptive Risk Manager and associated policies using Web Services Wrappers.
• Configure OAAM Strong Authenticator
• Configure Virtual Keypap/Keyboard devices to prevent phishing
• Integrate OAAM with OAM
• Install/Configure OIM 11g
• Install OIM 11g in HA configuration across DEV through PROD environments
• Deploy OOTB OID, AD, PSFT, LOTUS connectors
• Create custom Request Workflows
• Write composites to handle customizations
• Register above with OIM server
• Test/Deploy through PROD
• Provide subject matter expertise in the Oracle Identity Analytics 11g product.
• SME responsible for POC of both Compliance Services and Role Management aspects of OIA
• Provide client with expertise and training on:
• Branding: Icons, Label, Images via CSS modifications available in OIA
• Business Logic Customization available through the Web UI.
• Integrate OIA with existing OAM based SSO that uses header based SSO for authentication
• Deploy and test OIA Web Services UI.
• Usage as well as SME on extension of functions exposed via web-services
• Configure/Maintain OIA Server and Modules
• Identity Warehouse, Identity Certification, Identity Audi, Role Management and Role Analytics
• Assist with configuration and management of Rules Engin
• Assist with configuration and management various reports available through OIA Report Service
• Assist with SME/Best Practices on OIA metadata database.
• Clustering
• Replication
• Train client staff on ADMIN and DEV maintenance activities for entire stack of products listed above

Confidential, Atlanta, GA

Oracle Fusion and Identity Management Architect

Responsibilities:

• Responsible for upgrade planning of Portal environment from Aqualogic 6.1 to Oracle WebCenter 10gR4
• Responsible for upgrade planning of Stellant Enterprise Content Management 7.x to Oracle Universal Content Management 11g
• Architect and Design of new infrastructure for Oracle WebCenter Interaction and Oracle Universal Content Management from scratch to include fully redundant and Highly Available infrastructure
• Work with Oracle professional services to document project specifications and upgrade path
• Install configure ALL components of Oracle WebCenter Interaction 10gR4
• Migration of ALUI 6.1 components manually to Oracle WebCenter 10gR4 using database migration scripts as well as files migration
• Install and configure ALL components of Oracle Universal Content Management 11g
• Migrated objects and data from 7.x database to 11g database and Weblogic server.
• Install and configure Oracle Enterprise Single Sign On 11g
• Install and configure Oracle Identity Management 11g (OID)
• Install and configure Oracle Enterprise Manager Ops Center for OID
• Setup monitoring of OID application server and setup rules for automated alerts and server data backups
• Train local system admins on uses of EMCTL utilities and EMCLI for various applications such as starts/stops and monitoring farm health
• Train local system admins on using EM to roll out patches as well as backups and recoveries.
• Setup 19 enterprise web and desktop applications to use Oracle ESSO.
• Setup and configure Oracle Identity Federation to provide SAML 2.0 identity integration with 2 outside partners.
• Configure SAML 2.0 based authentication for users of CRM on Demand to provide seamless account mapping and account federation
• Setup testing scripts and testing criteria for WC and UCM.
• Report bugs and formulate plan for bug resolutions and manage using TestDirector.
• Documentation, Training Materials and Administration Guides created for all of the above

Confidential, Milpitas, CA

Oracle Identity Management - Architect

Responsibilities:

• Summary of duties and tasks:
• Analysis of current server authentication processes across Windows, Unix and Linux servers from DEV through PROD environments.
• Gather requirements and define project scope
• Design specifications created to match requirements and capabilities of Oracle Authentication for Server Operating Systems.
• Configuration of Oracle RAC database for Identity systems metadata repository
• Install and configure following components:
• Oracle 11g Weblogic Server
• Oracle Internet Directory 11g (OID)
• Configuration include WL clustering to provide High Availability at the Application server level for OID.
• Configure integration of OID with Active Directory
• Configure OID external authentication with Active Directory
• Setup and configure Oracle Enterprise Manager Ops Center 10g
• Setup and train local admins on monitoring and management of SLA for server authentication using automation and manual steps in EM and GC.
• Setup and train admins on monitoring and management of OAS hardware that is running slow or perhaps has failed completely
• Setup and train admins on migration of services from failed or slow serves to redundant hardware or virtual machines in the farm.
• Setup and train admins on rapid restoration of services and setting up of automated monitoring and alerts of these services
• Configure user and sudo-user access and authentication using Orale Authentication for Operating systems plug-ins
• Test above install/configuration against Windows, Unix and Linux servers
• Create automated testing scripts to test series of credentials that authenticate against both operating systems and LDAP servers
• Manage bug reports and issue resolution using Quality Center Suite.
• Train Confidential administrators on administration and configuration of installed system
• Create documents to cover end user training, admin training, DR and Failover planning, install/configuration guides specific to Confidential

Confidential, New York, NY

Oracle Access Manager - Solutions Designer

Responsibilities:

• Summary of Duties and Tasks:
• Gather requirements and transform into functional and design specifications
• Transform functional specifications into design specification
• Development of POC, DEV,TEST and PROD environments:
• Install and configure all OAM modules to include:
• Access Manager Server (OAM)
• Oracle Virtual Directory (OVD)
• Oracle Internet Directory (OID)
• Oracle Identity Server
• Web Gate
• Above setup was setup using High Availability and Redundant failover architecture
• Web Application Domain and Policy Configuration for SSO
• Delegated Administration and Workflow for User and Group creation, modification, deletion
• Install/Configure POC environment for Oracle Weblogic Portal.
• Management and configuration of Changes
• Testing using automated scripts for web application authentication
• Maintain and manage bug reports and issue resolutions with both developers and Oracle Support
• Train client employees (including departmental trainers)

Confidential, Seattle, WA

Oracle Enterprise Single Sign On - Solutions Designer

Responsibilities:

• Summary of Duties and Tasks:
• Gather requirements and transform into functional and design specifications
• Oracle ESSO deployment on Windows servers in ‘POC’ environment
• Development of ‘POC’ environment and other environments for integrations. To include:
• Install Oracle ESSO Administrative Console (Server)
• Install Oracle ESSO Logon Manager (Client)
• Setup and Configure Global Agent settings to match client requirements
• Replicate In higher environments using IMPORT/EXPORT features for settings and configurations
• Setup Windows as well as WEB based application profiles to match requirements
• Generation of custom MSI files to contain all business requirements and customizations
• Management and configuration of Changes
• Testing of SSO client software on multiple platforms for documented conditions and conflicts issues.
• Form a deployment and distribution strategy with client operations staff. Used both LOGON scripts as well as SMS
• Train client employees (including departmental trainers)

Confidential, Tempe, AZ

Oracle Identity Management Architect

Responsibilities:

• Summary of Duties and Tasks:
• Gather requirements specifications in working with client team
• Recommend and gain approval on design and architecture
• Enhance design to include High Availability, Clusters and Load Balancing as applicable.
• Build Linux based DEV,TEST,STAGE and PROD environments
• Install and configure following components:
• Weblogic Portal Install/Configure in High Availability mode
• Oracle Internet Directory (OID) in a 4 node cluster using an Oracle RAC database
• Configure Oracle Virtual Directory and install Oracle Virtual Directory Manager on client machines
• Configure OID for SSL Server Authentication and test connectivity from other servers and clients
• Oracle Adaptive Access Management - Setup and install using Weblogic 9.x on Windows Server 2003
• Install Oracle Access Manager components:
• Install Web Pass on Windows IIS servers
• Install Policy Manager
• Install Access Manager Server
• Install Web Gate
• Inter-connect and configure User data and Policy data integration using SSL
• Stabilize environments with several patches:
• OID upgrade from 10.1.4.0.1 to 10.1.4.2
• Upgrade OVD from 10.1.4.0.1 to 10.1.4.2 and ultimately 10.1.4.3
• Assist DBA staff with DB upgrade to version 10.2.0.4
• Document layout and inventory
• Prepare Install, Configure, and Training manuals
• Install Configure Oracle Adaptive Access Manager (OAAM):
• Create a Highly Available(HA) OAAM environment on Oracle RHEL in DEV thru PROD environments
• Division of User Interface v/s Administrative aspects into their own managed instances on Weblogic
• Configure various components of OAAM including:
• Strong Authenticator
• OAAM Rish Engine - Configure Rules Engine, Behavioral Profiling and Predictive Rish Analysis functionality
• Enable/Configure Device Fingerprinting and KBA Answer Logic
• Virtual devices- TextPad, KeyPad and PinPad
• SOAP native integration with OAM for SSO to various applications

Confidential

Oracle SOA Architect

Responsibilities:

• Summary of Duties and Tasks:
• Gather requirements specifications
• Upgrade client Oracle Access Manager to 10.x
• Re-architect for HA
• Include OVD in existing architecture
• Migrate Policies and User Data from previous versions to updated (Current) version
• Recommend strategy based on ‘service readiness’ of consumer and provider applications that are planned to be integrated (Seibel, Maximo, Oracle ContentDB, J2EE HomeGrown applications, EDI, Oracle EBusiness 11i)
• Prepare Test/POC environment: Install/Configure Oracle 10.1.3 SOA platform on Linux (Mid-tier) and Solaris (Infrastructure)
• Design Production infrastructure based on projected load/usage/capacity. Consisting of:
• Oracle 10g RAC database on Solaris
• Oracle 10g SOA 10.1.3 Application server on Oracle RHEL 4.0 environment x10 instances all clustered together. (AS managed cluster)
• Development specific to integration of services using ESB and BPEL process engineering as required.
• Demonstrate ‘loosely coupled’ nature of integration between consumer/provider applications using small changes to the services layers.
• Weblogic Portal install/configure for customer portal. 80,000 users.
• Oracle Identity Manager implementation
• Assist with requirements definition
• Install/Configure OIM using Weblogic 6.x as application server and Oracel 10g database. Environment installation and configuration included:
• Install Weblogic Admin Server along with managed nodes for high availability and clustering
• Configure JMS Queues
• Configure JDBC connection Pools
• Performance tuning of Application Server and Message Queues.
• Design custom adapters to be developed using OIM SDK for integration with the following:
• SAP
• Java Applications(several)
• Oracle and SQL Server d/b
• Configure and deploy OIM connectors for the following:
• Microsoft Active Directly
• Microsoft Exchange Server
• Oracle Applications 11i
• PeopleSoft
• Setup Administration best practices and documentation for end client use
• Train and support end users as well as admin users of the system across the enterprise
• Tools used:
• Oracle JDeveloper for 10.1.3
• Oracle BPEL Process Manager Plugin
• Oracle ESB
• Oracle Business Activity Manager
• Oracle eBusiness Adaptor
• Oracle FTP/File adaptors
• Oracle 10.1.3 SOA ready Application Server 10g
• Oracle Identity Manager
• Weblogic Application Server
• Oracle Identity Manager Client and Server components
• Install and Configure Oracle B2B Integration Server
• Configure Application Server
• Configure INBOUND/OUTBOUND Queues and Partner connections
• Integrate above interchanges with already installed processes using BPEL Process Manager.
• Install and Configure OID/OIM/OVD/OAM. Multiple directories were required to be unified virtually. Authentication and SSO was required between multiple applications for the end user layer.
• Configure OID and 10g AS
• Install and Configure OAM (all) and integrate with 10gAS
• Configure OIM with OAM for management of user v/s application profiles for multiple enterprise applications. Internal and External
• Configure OIM and OVD with integration to AD and eDir for user management and SSO profile data.
• Configure and deploy OIM connector for Peoplesoft:
• OIM User Reconciliation Connector Peoplesoft (Create/Updated/Disable/Enable Users)
• Fetching users records from target systems
• OIM User Management Connector for Peoplesoft
• Automated user access rights management
• Automated Security provisioning on Peoplesoft and Maximo target systems
• OIM Connector for Oracle HRMS
• Deploy and Configure using 10gAS
• Provide real time user reconciliation between OIM/IDM and HRMS and FND USER
• Install IP*Works EDI/AS2 Server
• Configure Partner Consumer/Provider sites
• Setup MIME/SSL security
• Configure MD5 Encryption on web server
• Integration with EDIINT provider using AS2 for connection/security
• Install and Configure Oracle ContentDB
• Install and Configure Oracle Secure Enterprise Search
• Install and Configure Portal 10g Application Server
• Install and Configure OID and SSO.
• Setup Synchronization with Microsoft Active Directory
• Including External Authentication with AD
• Windows Native Authentication with AD
• SSO with eBusiness
• Migration of Data and Assets using Oracle Drive and WebDAV to new repositories

Confidential, MA

Solutions Architect

Responsibilities:

• Summary of Duties and Tasks:
• Identify over all implementation strategy and road map from the inception phase of this project.
• Solution included deploying a B2E Portal for 1500 plus users.
• Solution was designed to provide ZERO SIGN IN from network-to-Portal-to-E-Business. No passwords required once users logged into their PC/Networks.
• Design HW, Load Balancing and Network architecture for DEV and PROD environments
• The PROD environment consists of 6 different servers. Combination of Linux and Solaris servers. Stand Alone WebCache Cluster, Mid-Tier servers and D/B and OID on Solaris servers with High Availability enabled.
• Install Oracle RHEL
• Install/Configure 10g AS Mid Tier on Linux
• Install/Configure 10g AS Stand Alone Webcache on Linux
• Install/Configure 10g AS Infrastructure on Solaris
• Install and Configure OIM/OVD/OAM on Solaris
• Oracle Portal used as a front end for enterprise document repository hosted in Oracle CM
• Documents retrieved and displayed in Oracle Portal pages using Oracle CM SDK/Webservices
• Oracle Enterprise Single Sign On
• Configure External Authentication to Active Directory 2003.
• Configure Windows Native Authentication aka ‘ZERO SIGN ON’
• User Oracle Identity Federation to Link accounts between Active Directory, OID and 11i FND USER stores. Provide cross application seamless authentication and entry for end users using SAML 1.0
• Oracle Identity Management Implementation
• Automate and facilitate SSO between 3rd party application used by the enterprise using Oracle Access Management
• Eliminate User Management Latencies by providing real time updates to all user stores centrally from OIM and Oracle Virtual Directory
• Create custom Oracle 11i user and policy management screens using Oracle Access Manager SDK and Oracle Web Services Manager
• Setup, Install, Configure OAAM suite on Weblogic 9.x platform running on a Windows 2003 server
• Configuration involved clustering Weblogic instances for added stability and branch environment strategy
• Use Oracle Adaptive Access Manager routines for authentication into Payroll and Employee financial profile websites hosted by 3rd party service provider (ADP). This was required due to internet based access from ANY computer with advanced authentication provided by OAAM
• Use Hardware forensics routines to identify and introduce complex authentication where required per business rules and requirements.
• Create Taxonomy and assist with Requirements Definition
• Create Design and Technical specifications
• Utilize Oracle's Portal interface/tools to create portal pages, content areas, page groups, portlets, and portal interface elements to meet ALL business requirements.
• Develop custom JPDK portlets using the PDK framework
• Develop JSR 168 compliant portlets to integrate with Oracle Content Management.
• SSO Integration to existing Discoverer environment
• Content Migration Strategies using Oracle Drive, webDAV and Linux Samba.
• Develop and Deploy Oracle Application Framework portlets for E-Business (OAF Portlets 11i)
• Defined Test and QA Strategy
• Integrate Portal 10.1.4 with Oracle 11i (ZERO SIGN ON)
• Act as sole Administrator of entire DEV and PROD environment
• Train customer on Administration and Integration activities
• Develop and assist with Policy formation: Administration, Deployment, Change Control, Integration.
• Database and Application Server patch application as required
• Database and Application Server tuning and performance management as required
• Troubleshoot
• Document ALL of the above areas as per customer requirements