Viswanath Bagathur Natarajan
*********@*****.***/+1-617-***-****
SUMMARY
Around 8 years of experience in the information technology industry
specializing in the domains of JAVA/J2EE and Information Security
. Design and Development of Java based SAML Consumer and Oracle Access
Gate. TriCipher Authentication Gateway customization via J2EE/Struts and
Federation via SAML.
. Design, Development, Implementation and Support of RSA's Go ID product (a
Java/J2EE Web Services and Web application based on Struts and Spring)
. Implementation Manager under Professional Services for RSA's Go ID
consumer authentication a Java/J2EE based Hosted Web Application (SecurID
hardware token based).
. Development and Testing of a Banking application (Java/J2EE based)
. Implementation/Support of the RSA's Adaptive Authentication Hosted Web
Application product (Transaction monitoring and fraud detection product)
. Implementation, Customization, Configuration and Deployment of Access
Management products like Oracle Access Manager (OAM), CA's SiteMinder,
RSA Cleartrust, etc.
. Implementation, Customization, Configuration and Deployment of Identity
Management products like Thor's Xellerate (now part of Oracle Identity
Management - OIM) and developed adapters for the same.
. Worked with various LDAP directories like OVD, OID, AD, eDirectory,
iPlanet directory, etc.
. Worked on various security devices like IBM Datapower (SOA Appliance),
nCipher HSMs
. Design & Development of custom application modules w.r.t security using
PKI, SSL etc.
TECHNICAL SKILLS
Language Java/J2EE (Primary), C/C++ (Secondary)
Technology/Methodology JNI, JSP/Servlets, Struts, Spring, Web Services
Internet skills JavaScript, HTML, XML, Basic XSL
IDE and Design Eclipse, Altova's XML Spy
Databases Oracle, MS SQL server, my SQL server
LDAP directories Oracle Virtual Directory, Microsoft Active Directory,
Oracle Internet Directory, Novell's eDirectory, iPlanet, openLDAP
Configuration Mgmt CVS, VSS, PVCS, Perforce
Operating Systems Windows, Solaris/HPUX/AIX, Linux, Netware
Identity/ Access Mgmt Oracle Access/Identity Manager, RSA Cleartrust
and CA's SiteMinder
Consumer Authentication RSA Go ID Authentication, RSA Adaptive Authn.
(Hosted), PKI, SAML
Enterprise Authentication TriCipher Authentication Gateway, Juniper SSL-
VPN, IBM Datapower
Application/ Web Servers BEA Weblogic 8.1, Tomcat 5.0, JBOSS, iPlanet,
Apache, IIS
QA/Testing/Profiler JProbe, Winrunner/Loadrunner, Mindreef Soapscope,
Parasoft's SOATest
EXPERIENCE - Mphasis an HP Company
Client: RSA Security (EMC), Boston, USA Aug '09 - To Date
Senior Java Developer/Security Architect
Responsibilities/Description: Go ID Translation Layer Development - I was
involved in the Requirements analysis of the translation layer, Designing
the software replacement for the IBM Datapower XML Firewall appliance and
Working with the VIP product team to understand their product and to see
how best to create the translation layer.
This project involved developing a translation layer that translates the Go
ID web service calls to the VIP product web service calls.
Technology: Java/J2EE, Spring and Hibernate on Tomcat, IBM Datapower
Client: Pfizer Inc, New Jersey, USA Jun '09 - Jul
'09
Senior Java Developer/Security Architect
Responsibilities/Description: Integrate a custom authentication and
federation solution, Understand/ customize the Struts based Tricipher
Authentication Gateway (TAG) and Develop a SAML Consumer using openSAML.
This project was about customizing the TAG which included java/j2ee based
development. The TAG provides multi factor authentication including browser
2-factor cookie, client certificate, challenge questions etc. The TAG was
customized to authenticate users against the ADAM directory instance and
send a SAML assertion to the Juniper SSL VPN for authorization. After the
Juniper authorizes the user, it sends another SAML Assertion to the SAML
consumer module of the access gate developed using Oracle Access Manager
SDK API. The access gate then creates the Single-sign on (SSO) cookie and
sends it back to the user. From then on the user can easily access multiple
applications due to the SSO cookie.
Technology: Java/J2EE, SAML using openSAML, LDAP, TriCipher Authn. Gateway,
Juniper SSL VPN, Oracle Access Manager (OAM), Oracle Virtual Directory
(OVD), Active Directory
Client: RSA Security (EMC), Boston, USA Jul '05 -Feb '09
Senior Java Developer/Team Lead/Implementation Manager
Responsibilities/Description: -
As a Senior Java-J2EE Developer in the Go ID Java/J2EE web-services and web
Application Development project, contributed to the
Design/Development/Implementation of the Product, Performed POCs w.r.t
CTKIP, Datapower, etc., Developed code for demos, Managed releases of the
application, Managed the integration environment, Managed the interaction
b/w technical operations and our development group, Involved in the
performance & availability test conducted using Load Runner., Involved in
the profiling test using JProbe profiler.
As a Team/Technical Lead in the Advanced Tech Support (ATS) Project, led
the level-2 technical support team for supporting a consumer authentication
cum fraud detection hosted web application product called RSA Adaptive
Authentication, Handled a team of 5 people, interaction with various
internal teams (R&D, Program Mgmt, Prof Svcs, etc.) and direct interaction
with Major Financial Institutions like banks, credit unions, stock trading
etc.
As Implementation/Project Manager for the Go ID consumer authentication
product and the RSA Adaptive Authentication product, was part of the
professional services group, Helped customers to implement the Go ID
consumer authentication hosted product, Also handled implementation changes
such as setup changes/ migrations for the Adaptive Authentication product
(another consumer authentication hosted & fraud detection), Simultaneously
handled multiple customers, Responsible for taking them from scratch to
production, Contributed to the Design/ Implementation/ Features of the
customer's Product, Involved from development till going live in
production, Post-production transitioned customers to support, Directly
worked and interacted with the end customers over the phone, Made customer
site visits.
Technology: Java/J2EE, Struts, Spring, Web Services, XML/Basic XSL,
Weblogic, Oracle 10g database, Crystal Reports, JProbe profiler, XMLSpy,
Load Runner, Eclipse, DataPower
Products: RSA Go ID Consumer Authentication, RSA Adaptive Authentication
(transaction monitoring cum fraud detection product)
EXPERIENCE - Mphasis BFL Limited
Client: Chase Bank [Offshore] Bangalore Apr '05 - Jun '05
SiteMinder Developer/Security Architect
Responsibilities/Description: SiteMinder Custom Authentication Development
- As a Developer with SiteMinder Expertise, Developed and tested the custom
authentication scheme, Did the High level and Low level design, Was
involved in installation/configuration/deployment of SiteMinder policy
server and web agents and Created SiteMinder policies, realms, rules and
responses for testing the customer authentication scheme
Technology: CA/Netegrity's SiteMinder and C/C++, Multithreading using
pthreads
Client: Thor Technologies [Offshore] Bangalore Dec '04 - Mar
'05
Senior Java Developer/Identity Mgmt Engineer
Responsibilities/Description: Thor's Xellerate Identity Mgmt Adapter
Development - Contributed to the Design/Implementation of the Adapters,
Completely developed the GroupWise Adapter, Involved in the development of
the eDirectory and Oracle OID adapter
This was an adapter development project. An adapter is a plug-in to the
main product that is the Xellerate Identity Management Product. For
creating identities in various products like eDirectory, GroupWise, OID
etc, you had to use different adapters with the main product.
Technology: Thor's Xellerate Identity Manager, Java/JNI, C++/DLL, Novell's
eDirectory/ GroupWise, Oracle OID, Windows/ Linux/Netware, JBOSS
EXPERIENCE - TCS (Tata Consultancy Services)
Client: ABN AMRO Bank, [Onsite] Amsterdam, Netherlands Aug '02 - Apr '04
Senior Java Developer/SiteMinder Engineer
Responsibilities/Description: Business Contact Database (BCDB) dialogues -
Here involvement was mainly in the requirements/development/testing phase
and communicating the same to the offshore.
This is a web-based application development project. The aim is to develop
registration, view and amendment dialogues on the BCDB. The dialogues are
made available via the Intranet.
Security was provided by integrating the SSIA (Security Services for
Intranet Applications) with this application. SSIA is based on Netegrity's
SiteMinder.
Technology: Java/J2EE, IBM Web-Sphere, SiteMinder, Winrunner 7, AIX
Client: Hewlett Packard (HP) Consulting, [Onsite] Germany Jan '02 - Jul
'02
SiteMinder Developer/Java Developer
Responsibilities/Description: In this SiteMinder Custom Development
project, custom authentication was implemented with the use of Netegrity's
SiteMinder security product. This product was used to develop the Security
Services that include the Authentication, Authorization, Access Control,
Signing services, etc. using the SiteMinder C API. These services were
developed as extensions to existing SiteMinder product. Here involvement
was mainly in developing the Signing Services.
Technology: SiteMinder, SiteMinder C API, JAVA, C/C++, nCipher hardware,
iPlanet, HPUX
Client: National Securities Depository Limited, Mumbai April '01 - Dec
'01
Developer
Responsibilities/Description: I was involved in the development of the
Certification Authority Component of the PKI product. This project involved
the development of a PKI solution to be used for the purpose of
Authentication & Authorization whenever any sort of transaction is to take
place through internet.
Technology: C/C++, SSL, LDAP, OpenSSL, OpenLDAP
EXPERIENCE - GE (General Electric Ltd.)
Student Trainee/Developer Jan '01 - Mar '01
Responsibilities/Description: This project involved developing Intranet
content for the GE team.
Technology: Java, HTML, JavaScript, Microsoft FrontPage