Information Security professional with total of 10 years and over 5 years of experience in identity management, access management, role management, compliance management, solution design, system integration, implementing and deploying large-scale identity management solutions for large enterprises using SailPoint, Oracle and Sun products
Information Technology and Security professional in architecting and deploying Identity Management, LDAP Directories, Single/Reduced Sign-On (SSO), Provisioning and Provisioning/Identity Workflows, Access Management, RBAC (Role-Based Access Control), Compliance and Auditing Technologies, Federated Identity/Federation, Enterprise System Architecture, Security Infrastructure Design, Authentication and Authorization technologies, as well as custom-built security and technology frameworks.
Proven technical leadership skills include the ability to manage teams, earn the respect of its members, led by example, and thrive in an entrepreneurial environment. Persuasive verbal and written communication skills compliment a proven ability to multi-task, maintain an organized approach, and ensure success - even when faced with high-pressure or high-risk situations. I am committed to providing a valuable contribution to the success of your clients, team and business through my hard work. Creative and innovative thinker with great analytical and decision making skills in high faced large enterprises.
Architecture, design, development, testing, integration and implementation expertise in Identity Access and Role Management solutions.
Design and Implementation experience with SailPoint IIQ 6.x, Oracle Identity Manager 10g/11g, Sun Identity Manager, Sun Access Manager and Sun OpenSSO, Enterprise Directory Servers formerly called Sun Enterprise Directory Server and eDirectory Servers, Oracle Identity Analytics formerly called Sun Role Manager.
Experience in all phases of software architecture, designing, development, maintenance, administration, Testing, deployment, migration, and production support of LDAP Directories (ODSEE 11g), Sun Directory Server Enterprise Edition, Open LDAP).
Experience in improving the cluster performance by tuning the OS kernel and network parameters.
Experience with virtualization tools used to develop proof of concept solutions leveraging VMWare Workstation, Oracle VirtualBox, VMWare VSphere and Oracle VM Server.
Experience in Oracle Identity Manager and Oracle Identity Analytics integration for Role Based Provisioning
Design and Implementation of Oracle Identity Analytics for User Access Recertification and Entitlements Review and Data Owner Recertification
Conducts initial project definitions and performs appropriate business analysis, systems analysis and design.
Perform project planning, critical path analysis, tailor implementation approach and roll out strategies
Prepare, recommend and review the IAM solutions architecture road map.
Worked with vendor’s Product Support teams to resolve issues (defects, bugs, enhancements) with product
Experience on RBAC(Role Based Access Control) analysis and implementation
Expertise in managing IBM Web Sphere and WebLogic Application Servers.
Extensive experience in developing applications using Java, J2EE components including Servlets, JSP, EJB, JDBC.
Experienced in web development using HTML, CSS, Java Script and AJAX technologies.
Experienced in developing MVC framework based websites using Struts and spring.
Strong experience in working with Application Servers like Apache Tomcat, WebLogic, JBOSS, IBM WebSphere.
Continuous Improvement, Customer-focused and highly organized.
Exceptional analytical, oral, written, interpersonal, and trouble shooting skills
Ability to handle multiple tasks and work independently as well as in a team
Ensure requirements gathered, processes defined, and use cases documented follow out of the box configuration vs. customization as much as possible
Manage client requirements and configure SailPoint IIQ connectors for 34+ applications
Design SailPoint deployment and solution architectures
Participate in all SailPoint deployment activities – connector configuration, custom rule development, workflow configuration and development, third party system integration.
Design, Implemented a solution which manage the Identity lifecycle of almost all applications with the enterprise, without directly controlling the identity store within the application.
Involved in creating custom reports, certifications in order to cater various data feeds.
Achieved SOX and PCI compliance by building a flexible and scalable framework to provide authentication and authorization services while supporting rules/roles/languages requirements for various International countries.
Design and Implement data import of various types of data files from internal and external target sources for validating access levels.
Created a Registry for important information on all applications.
Participate in and/or User Acceptance Testing and bug-related reengineering efforts
Perform Installation and configuration of SailPoint IdentityIQ
Develop custom SailPoint BuildMap Rules and Workflows as per the business needs.
Setup applications Active Directory, LDAP, Oracle and Flat Files.
Providing solutions for the changing business requirements.
Implement REST classes using SailPoint Rest Application.
Using IIQConsole for operations such as checkout, import, connector Debug etc.,
Used IQService as part Identity IQ for Active Directory (AD) provisioning.
Setup direct connectors for AD, LDAP,MySQL,Oracle,EPIC
Configuration of Roles, Policies and Certifications for governance compliance
Build and Configure SailPoint in-built tasks like aggregation, ID refresh, schedule tasks, correlation, etc.
Configuration and development of SailPoint Life Cycle Events (LCM)
Customizing and branding of SailPoint solution.
Provide knowledge transfer and post production support activities, as necessary.
Client Name : Presbyterian Healthcare Services
Location : AZ, USA
Role : SailPoint Developer
Team Size : 6
Project Period : Feb 2012 – Nov 2013
PHS was looking for migrating their Sentillion and Caradigm provisioning system to SailPoint IIQ that would ease the user management across 24 applications and would help them to monitor and audit all user accesses.
Design & Implementation of SailPoint IIQ
SailPoint IIQ Installation and Configuration as required by the design solution
Implementation of Self Service feature, Password features (PTA, Forgot password, Change Password), provisioning feature, configuring various roles and policies in SailPoint
Set up SailPoint IIQ policy server on 4 environments (Dev, QA, UAT & Production)
Developed build map rule, creation rule and customization rule to create Employee and Contractor user accounts into SailPoint from their current application’s exported feed file.
Developed a custom form in the SailPoint UI so that various admins can create Employee/Contractor user accounts manually through UI and provision users
Created and ran the aggregation task to bulk load authoritative source data from Active Directory, Exchange and LDAP
Developed a creation rule to run update, terminate and rehire transactions on specified Employee and Contractor user accounts based on the feed file data.
Developed a scheduler using Java that will periodically run to terminate contractors on their specified contract end date
Developed a code that will send expiration notification to Contractors
Developed a scheduler that would periodically check for Name change requests in the feed file data and will change the name of respective Employee account
Developed a java code that will consolidate role details of user accounts into a CSV file and send to HR or Application Admin. The admin can then act upon the access of users accordingly.
Built Joiner, Mover and Leaver workflows to maintain user accounts
Developed custom workflows with approvals and also modified OOTB workflows as per client requirement
Created and Implemented static/dynamic roles. Configured entitlements and policies.
Did Access re-certification, automatic/manual remediation for applications managed by SailPoint for Employees and Contractors
Analysis of the specifications provided by the client and help Project Manager to estimate the effort required
Requirement analysis and preparing Requirement Documents and Design Documents
Client Name : First American Corporation
Location : CA, USA
Role : OIM Developer
Team Size : 8
Project Period : May 2011 – Jan 2012
First American Corporation is a US based Title Insurance and services company. The project includes implementing and integrating OIM and Sun Role Manager solution. The implementation includes end-to-end provisioning and reconciliation of users from MS Active Directory to MSSQL DB, Web Services, eBusiness Suite and Active Directory. The solution also includes reconciliation of around 30000 users and provisioning them to various target resources..
Coordinating with business analysts on collecting requirements
Involved in Architecture, design, build, test and deployment stages of the project
Integrated Oracle Identity Manager with Oracle Identity Analytics for Role Based Provisioning
Developed Configuration, Integration and migration documentation for the client developing connectors and API(s) for automated provisioning
Performed User provisioning and reconciliation from Flat file, DB and AD.
Performed issue resolution with respect to these target systems.
Acted as configuration manager for the project performing review of the OIM metadata exports.
Version management of code and OIM components, import of OIM components.
Sanity check on OIM environment.
Configured entitlements, Provisioning and de-provisioning entitlements to users
Applied Bundled Patch sets and OIM Merge Patch on OIM using O-patch utility
Participated in Customer meetings and maintained On-call telephone for support, out of Business hours
Registered the plugins, imported and exported XMLs into MDS.
Configured Remote design console for Data Governance team
Designed and implemented High Availability and failover
Design workshops with all stakeholders involved in the project
Built Identity Warehouse and Role mining
Populated the Identity Warehouse (Imported Users, Applications and Glossary Definitions).
Conduct Role Mining and validation.
Designing and implementing custom solution for Recertification Managers and Admins for User Access
Recertification and Data Owner Recertification
Developed and implemented SIT and UAT test cases
Trained Clients on managing infrastructure
Client Name : Merrill Lynch,
Location : NY, USA
Role : OIM Developer
Team Size : 5
Project Period : June 2010 – Apr 2011
Identity Management Implementation for Merrill Lynch is an initiative to implement and integrate solution that
would automate Internal and External identities/accounts management across various applications and
platforms.Oracle Identity Management suite would also provide enhanced capabilities like workflow,
delegated administration. The requirement from this system is to be able to manage complete user life cycle
in terms of account provisioning, capability for audit logging and reporting.
Coordinating with business analysts on collecting requirements
Involved in Requirements Gathering, Design, Build and Test phase of the project
Involved in setting up the environment OIM with AD, MS Exchange, and Oracle DB.
User Provisioning/Groups and Organization Level Provisioning to OID and AD with Exchange from OIM;
Initial Reconciliation done from Trusted Source of PeopleSoft.
Developed Complex Approval & Involved in developing Multilevel Approval tasks.
Designed Roles, Rules, Workflows routes involving enable – disable user, and audit report, delegation.
Added Custom attributes for both Reconciliation and Provisioning.
Customized OIM From on the basis of Roles like Full-time and Contractor.
Developed Entity, Prepopulate, Process task and Rule generator adapters to support the workflows.
Created Password policies in AD and OID
Integrating OIM and OAM applying Single-Sign on.
Involved in the creation of tasks for lifecycle management of users.
Configuring and customizing self-registration forms.
Developed technical documents and test cases for SIT/UAT.