Mail: *****.***@*****.*** IDM Profile
Srini M
*****.***@*****.***
Professional Summary
• 5+ years of Experience in Identity management tools like Cyber-Ark Privileged Identity Manager (PIM) 7.1,
IBM Tivoli Identity Manager (ITIM) 5.1, IBM Tivoli Directory Integrator (ITDI) 6.x and 7.x
• Having experience in the field of Software Development in creating solutions for IT Applications and Web based
Applications using Java, J2EE, PHP, AJAX, Java Scripting, XML, XSL and XSLT.
Experience Highlights
• Involved in design, development and Support to manage privileged shared accounts using Cyber-Ark 7.1
• Designed safes and policies to manage various platforms privileged accounts (Windows, Linux, AIX, HPILO,
Network, DIGI and XEN servers)
• Designed safes and policies to manage various databases privileged accounts(Oracle, MSSql, Sybase and Teradata)
• Designed group policies to manage the XEN and DIGI application accounts.
• Designed various usages to change scheduled task passwords and configuration files for windows service accounts.
• Created user.ini file dynamically to upload the accounts using password upload utility.
• Excellent exposure in cyber-ark components Central Policy Manager (CPM), Privileged Session Manager (PSM),
Password Vault Web Access (PVWA), Private Ark Client, Password Upload Utility and PACLI.
• Having knowledge on Application Identity Manager (AIM) and On-demand privileged Identity Manager(OPIM)
• Involved in design, development and supporting a huge Identity Management implementation (ITIM 5.1)
• Implementing Identity management solutions for various customers using Tivoli Identity Manager, CyberArk
Privileged Identity Manager
• Excellent exposure on Tivoli Directory Integrator.
• Implemented various Assembly Lines to manage the Identity information in sync between the source and target
system.
• Implemented various Assembly Lines to Generate the Reports and Feeds
• Excellent exposure to directory servers like Microsoft Active Directory, IBM Tivoli Directory Server.
• Trained on Oracle Identity Manager and Oracle Access Manager.
• Trained on Adobe Flex and hadoop in Infosys
• Understanding businesses requirements, to come up with new innovative ideas, design, improvements & solutions
which can be implemented.
• Plan, organize, prioritize the work to meet on time, the deadlines of the clients and keep customer’s satisfaction at
the highest level possible.
• Experience in writing complex queries.
• Having experience in implementing SaaS based web applications (http://www.metromela.com).
• Having experience in Cloud Computing Sales Force Bulk API (salesforce.com), Google App Engine.
Security Experience
• Designing and Implementing Privileged Identity Management (Cyber-ark 7.1) to manage various operating system,
database, Remote Client, Network and application devices.
• Expertise in create password vault safes and policies.
• Implementing Personal and privileged Identity Management solutions using products like IBM Tivoli Identity
Manager, Tivoli Directory Integrator and Cyber-ark Privileged Identity Manager.
• Experienced in Secure Application Coding & Design.
• Expertise in creating Assembly Lines using ITDI.
Mail: *****.***@*****.*** IDM Profile
• Expertise in creating services, roles and provisioning polices in ITIM.
• Was involved in developing a synchronization solution between various data sources.
Technology Experience
Cyberark Password Vault 7.1, Tivoli Identity Manager 5.2,Tivoli
Directory Integrator 6.1&7.0, Oracle Identity Manager, Oracle Access
IT Security Services Manager, Enterprise Directory, Secure Coding Standards.
Frameworks/Web Apachewebserver, J2EE, JSP, Java Beans, Java Servlets, JavaScript, PHP,
Technologies AJAX, Tomcat Web Server, Web Logic and Jboss
Development/Productivity Eclipse3.2, ITDI eclipse plugin, DBVisualiser (Oracle, Sql Server, My
Tools Sql), SQLYog (My Sql), PgAdmin, Erwin (4.2), Aqua Data Studio,
Verticals Banking & Finance, Utilities.
Operating Systems Linux (Redhat & Fedora Core), MS-W2k – W2k3 and AIX.
RDBMS Oracle, MS-SQL (7.0 / 2000 /2003), MySQL, DB2
Education & Certification
• M.C.A. from Osmania University aggregated with 72%.
• B.Sc. (M.P.C.) from S.V. University aggregated with 71%.
• Intermediate (M.P.C) from Intermediary Board aggregated with 70%.
• S.S.C from S.S.C Board aggregated with 68.5%.
• Completed Cloud Computing Architecture V1 certificate from IBM.
• Certified XML Professional 251a from Infosys
• Certified Java SE Java SE Professional from Infosys
• Trained on OIM, OAM and OID products from Oracle
Work Experience
• Working as a Technology Analyst in “Infosys Ltd”, from Sep’2010 to till date.
• Worked as a Software Associate in “Prabhavat Solutions India Pvt. Ltd”, Hyderabad from May ’2008 to July ‘2010.
Mail: *****.***@*****.*** IDM Profile
Projects Handling/ Handled
#1
Title: Enterprise Privileged Identity Management
Duration: Nov 2012 to till date
Organization: Infosys Ltd
Team Size: 8
Client: Southern California Edison (SCE)
Environment: Cyber-ark 7.1, Password Upload Utility, PACLI, ITIM5.1, ITDI7.1, Active Directory and LDAP
Project Description:
The Cyber-Ark Enterprise Password Vault Application to address the Privileged Identity Management (PIM)
requirements of SCE. It is frequently used as an Information Security and governance tool to help companies in
meeting compliance regulations and to prevent compromise of privileged accounts. The management of privileged
identities can be automated to follow pre-determined or customized policies and requirements for an organization or
industry.
The Password Vault application implements a Privileged Identity Management solution with session management and
password vault capabilities to meet the enterprise requirements for centrally managing shared and privileged user
accounts, and managing and establishing audit records of privileged user access.
The Cyber-Ark Privileged Identity Management (PIM) suite – an enterprise system that secures, manages, and
monitors all privileged accounts and activities. The Password Vault is being deployed to manage shared & privileged
accounts within the IT Infrastructure environment.
The benefits of the Password Vault are:
• Each shared and privileged account will have a unique password, minimizing the impact if a single server is
exploited.
• The Active Directory domain will be leveraged to provide central Authentication and Access control.
• Will support the 24-hour NERC-CIP revocation requirement.
• Provides a central location for privileged account activity and compliance reports.
• Provides scheduled and automated password changes in accordance with NERC-CIP requirements.
Responsibilities
• Closely worked with various system administrators teams and understand their requirements
• Designed to manage privileged accounts on Windows, UNIX, Cisco, HP ILO and Database platforms
• Design the safes and policies as per client requirements
• Customize the cyber-ark plugins and connection components
• Customize the password upload utility input CSV file to different teams
• Enroll accounts into Password Vault using Password Upload utility
• Understand the audit and compliance requirements and schedule the reports.
• Integrate Password Vault with Cloud team to provision and de-provision Windows and UNIX accounts
using PACLI 5.5 CLI API.
• Provision and de-provision personal identities to Password Vault LDAP using ITIM5.1
• Centralized Enterprise user management using ITIM5.1
• Centralize Enterprise privileged accounts management using Cyber-Ark PIM7.1
• Directory Mapping and User management using Private Ark client.
• Manage the Safes, Accesses controls and Group membership as Safe Administrator
• Manage the CPM and Account policies as Vault Administrator
• Customize the accounts display page as per requirement
• Customize the notification templates, Headers and Footer.
Mail: *****.***@*****.*** IDM Profile
#2
Title: Slid Master Migration Project
Duration: Jan ’2011 – Oct’2012
Team Size: 4.
Organization: Infosys Technologies.
Client: Florida Powers & Lights (FPL).
Environment: ITDI, ITIM, LDAP, Active Directory, Java, Java Script, MS-Sql and DB2
The purpose of the SLID Master Migration project is to align its Enterprise IDM with industry standards and best
practices so as to: Phase out legacy systems, Consolidation of technology, Automation of process, Minimal
customization across the IDM landscape.Identity management system deals automatic provision and de-provision for
various identities including Employee, contractor, Generic Id and Secondary Id. IBM Tivoli Identity Manager 5.1 is
used to manage the identities with ITDI and target system includes Active Directory, SAP, AIX/UNIX boxes, Lotus
Notes etc.
Responsibilities:
• Coordinate with the on-site team to understand the client requirements and created the design document.
• Integrating and deploying new applications into the ITIM infrastructure.
• Modifying existing workflows, provisioning policies and Life Cycle Rules.
• Modifying static and dynamic roles as per requirement.
• Monitoring Reconciliation and nightly batch jobs and remediation measures.
• Production support for ITIM and ITDI
• Implemented Assembly lines to extract and push data to/from different sources
• Generate HTML reports using ITDI tool and send it to administrators.
• Exception handling in ITDI and send notifications to ITDI Administrators
• Implemented FTP and SFTP functionality to ftp’ed the feed files.
• Implemented encrypt and decrypt functionality using java in ITDI.
• Used share point to track the defects
• Manage and allocate work to the team
Mail: *****.***@*****.*** IDM Profile
#3
Title: Cloud Store
Duration: Sep ’2010 – Dec 2011.
Team Size: 4.
Organization: Infosys Technologies.
Client: Internal Purpose (POC).
Environment: Struts, JPA, JSP, RESTFUL Webservices, Google App Engine, CCAVENUE.
Cloud Store is an online Shopping Cart for internal purpose of Infosys. It’s implemented using Struts and deployed on
emerging cloud environment Google App Engine. We explore on Data Store, Blob Store, Mail API, Cron Jobs, and
Users API.
Responsibilities:
• Design the cloud store UI using static HTML pages
• Design the data store data model using Erwin tool
• Implement the cloud store using struts and deployed on Google App Engine.
• Integrated Google Mail API with cloud store to send mails
• Integrated Google OpenId with cloud store to login.
• Integrated Blob Store with cloud store to manage the images.
#4
Title: ActionBridge 3.0.2.
Duration: Feb ’2010 – July ‘2010.
Team Size: 6.
Organization: Prabhavat Solutions.
Client: ManuLife
Environment: Core Java, JDBC, Ejbs, Sales Force Bulk API, Web Services, Weblogic9.2, jboss3.2.6, Sql Server
2005, My Sql, Yourkit Java Profiler (8.0.22), JUnit.
ActionBridge 3.0.2 release succeeds version 3.0.1 and incorporates several enhancements in the areas of Data
Reconciliation/Error handling, Batch Processing and Security/Authentication for ActionBridge. To satisfy these and
other requirements, this release will streamline the Data Reconciliation, Rejected Records and Error handling process.
Improve user-friendliness of the error resolution process. Enhance management of ActionBridge security.
Data Reconciliation and Reprocessing Failed Records
This release will enhance ActionBridge Data Reconciliation usability by displaying the failed records in a format more
natural and intuitive to the user. Instead of displaying XML formatted data, the data components will be displayed as
name, value pairs. This release also enhances the failed record reprocessing by adding the ability to reprocess the failed
records from both current batch execution as well as from the history of batch executions at the entire batch level or at
the individual WorkPlug level. This release also provides the user with the ability to search for failed records on
External Id values and/or part(s) of the error messages for the WorkPlug in context, and the ability to edit failed records
to reprocess them.
Enhance CustomerGrid Security Module
Mail: *****.***@*****.*** IDM Profile
This release enhances the CustomerGrid security module to control access to ActionBridge and its sub-functions. Based
on the user role, the user will be allowed or restricted access to various capabilities of ActionBridge. It leverages the
existing user roles defined in GridConsole, such as Configuration Manager, Power User, and Standard User.
Configuration Manager: In addition to the existing access and privileges in other modules of CustomerGrid,
this role will be provided access to ActionBridge with ability to configure Data Persistency Mappings,
Configure and Schedule Batch. This role will also have ability to manage data persistency errors, edit and
reprocess failed records from the latest batch execution or from the execution history.
Power User: In addition to the existing access and privileges in other modules of CustomerGrid, this role will
be provided access to ActionBridge with ability to edit and reprocess failed records from the latest batch
execution or from the execution history.
Standard User: In addition to the existing access and privileges in other modules of CustomerGrid, this role
will be provided access to ActionBridge with ability to view the failed records from the latest batch execution
or from the execution history.
Responsibilities:
• Data model creation and maintenance using Aqua Data Studio.
• Created entity beans using Ejb’s.
• Designed and implemented error handling functionality.
• Designed and implemented role based access functionality.
• Designed and implemented data reconciliation and reprocessing failed records functionality.
• Identified memory leaks using your kit java profiler and resolved them.
• Implemented unit test cases using JUnit.
Mail: *****.***@*****.*** IDM Profile
#5
Title: ActionBridge 3.0.1.
Duration: Apr ’2009 – Jan ‘2010.
Team Size: 6.
Organization: Prabhavat Solutions.
Client: ManuLife
Environment: Core Java, JDBC, Ejbs, Sales Force Bulk API, Web Services, Web logic9.2, jboss3.2.6, Sql Server
2005, My Sql.
ActionBridge 3.0.1 is aimed to provide the product features required to configure the end user functionality as specified
by Manulife for Data Persistency Batch Scheduling, Monitoring and Management. This release will focus on enhancing
the Data Persistency functionality. Currently, ActionBridge supports only individual WorkPlug updates and does not
support any subordinate update relationships. Manulife has a requirement for batch process of groups of WorkPlugs,
not just on an individual basis, as well as subordination of WorkPlugs in the update process. Essentially, what they
really need is an enterprise-class WorkPlug Update Manager which provides an ergonometric UI for defining and
managing the update process of dozens of WorkPlugs.
Responsibilities:
• Coordinate with the on-site team to understand the client requirements and implement various modules
sticking to deadlines and with high quality
• Design and maintain data models using Erwin tool.
• Create and maintain the metadata scripts.
• Participate in the requirements sessions and design discussions.
• Understanding SalesForce API’s, especially the BulkAPI for upserting huge amounts of data and
implementing it in the product.
• Worked and implemented the Batch Configuration and Execution, WorkPlug ReExecution and Data
Reconciliation modules.
• Perform unit testing and code fixes to the implemented modules
#6
Title: Metromela (2.1).
Duration: Sep '2009 - Nov '2009.
Team Size: 6.
Organization: Prabhavat Solutions.
Client: Metromela
Environment: Php, mysql, Apache, symfony framework.
Description:
MetroMela is a multi-modal, multi-city information server that helps consumers and local businesses discover and
transact with each other. As a city-centric website, it will help users to find relevant local information, and help users to
benefit from the best deals running in town. It is a user-centric site that offers relevant and objective information on the
city to its users. It is also a site where users can share their thoughts, comments and reviews with others. It provides a
new media platform for local merchants through web and mobile. Users can also access this application in other social
Mail: *****.***@*****.*** IDM Profile
applications like orkut and facebook. It provides search throughout the site. Users can search for any vendor, review,
guide, movie or deal.
Responsibilities:
• Understanding the Business requirements.
• Analyzed and implemented search functionality.
• Analyzed and implemented Ad sense functionality.
• Designed and implemented Reviews tab functionality.
• Analyzed and implemented Category Popup showing functionality using Ajax.
• Involved in creating complex queries.
• Involved in resolving complex problems like session related issues.
• Analyzed the user roles and displayed the tabs and links based on user roles.
#7
Title: CustomerGrid2.1 Enhancements.
Duration: Jan ’2009 – Mar ‘2009.
Team Size: 6.
Organization: Prabhavat Solutions.
Client: Embark
Environment: Core Java, JDBC, Ejbs (session beans), Web Services, XML, XSL, Web logic, Sql Server, My Sql and
Oracle.
Description:
CustomerGrid is a data-sharing platform that empowers the business users to unlock the full potential of the customer
data warehouse investments that companies have made over the years. It is a flexible and extensible communications
infrastructure that leverages existing data sources and applications to integrate customer data across multiple lines of
business and functions, in real-time. Using the Customer Grid, companies can aggregate and integrate vital customer
data on-demand across multiple databases, information systems, and lines of business to service customers as a unified
whole.
Responsibilities:
• Performing various tests on CG, analyzing the memory usage, and memory leak issues.
• Involved in finding solutions for development issue of the Project.
• Resolved session related issues and query generation issues.
• Worked with clients to resolve the issues.
#8
Title: Payroll.
Duration: May ’2008 – Dec ‘2008.
Team Size: 5.
Organization: Prabhavat Solutions.
Mail: *****.***@*****.*** IDM Profile
Environment: Core Java, Net Kernel, Sql Server 2005, Ajax, XML, XSL, NSIS (installer tool), SOA and SaaS.
Description:
Payroll software is developed using net kernel as product. NetKernel's resource-oriented computing model makes it
simple to construct powerful software. NetKernel's advanced infrastructure extends the core ideas behind Unix and
REST. NetKernel provides the ability to build complex applications as a combination of small fully functional modules
providing a small subset of functionality useful for the complex application. This model keeps the software
development very simple and elegant. This was initially developed as SaaS application and as per client requirements it
was converted into desktop application. This product consists of employee, payroll, client, reports, gateway, security,
and navigator modules. This product automatically generates pay checks, bonus checks, Tax (form16) and PF forms.
Responsibilities:
• Data model creation and maintenance using Erwin tool.
• Understand the requirements for various modules.
• Involved in designing and development of the Project.
• Involved in tax calculations based on CTC, generating yearly pay slip and projected salary statement based
on tax setup.
• Guide the trainees in implementing the modules.
• Implemented xunit test cases for core modules.
• Made installer using NSIS.