Rokesh Lakshmipathy

Mobile: 609-***-****

E-mail: ad3tao@r.postjobfree.com

SUMMARY:

•IT Professional with 8+ years of experience in Identity and Access Management products viz., ForgeRock Identity and Access management and Oracle IDCS, which includes development, implementation and testing of enterprise wide Single Sign-On, Ping Access, Ping Directory, Ping Federated Single Sign-On, Multi Factor Authentication (MFA) and Privileged Access Management solutions.

•Certified AWS developer with the latest services and technologies

•Hands on experience in AWS services like EC2, IAM, Lambda, CLI tools, CI & CD, S3, VPC, Cloud Formation, DynamoDB, RDS, Cognito and others.

•Configuring Ping Federate tool as an Identity Provider and Service Provider.

•Upgrading Ping Directory, Ping Federate and Ping Access to the latest Support versions from time to time as they become available from the vendor.

•Exporting Metadate, Creating adapters, Service Provider connections, Identity Provider connections, replicating configuration archive, importing and exporting SSL certifications using Ping Federate in both Production and Non-Prod Environments.

•Troubleshooting day to day SSO issues for applications onboard to ping suite of products.

•Strategized and implemented Identity and Access Management solutions using Saviynt, strengthening the client's security posture and enhancing usability.

•Expertise in installation, configuration, deployment, and maintenance of enterprise wide SSO solutions on Windows as well as on Linux servers.

•Installed and configured Ping Federate in a Linux environment, including setting up the required infrastructure components and configuring the server for optimal performance and security.

•Defined and maintained Active Directory (LDAP) security models.

•Delivered new global enterprise SSO and LDAP architectures for development, staging and Production Environments.

•Experience in implementing fail-over and load balancing schemes between Web Agents and Policy Servers and also between Policy-servers and LDAP.

•Experience in configuring multiple LDAP instances and defined LDAP Schemas.

•Integrated OKTA SSO for various applications on different platforms along with enabling MFA at OKTA tenant & application level.

•Experience in identity and access management tools like Ping Federate, OKTA, CA Site-minder, ADFS, CA Authminder, ADFS and InAuth.

•Core Experience includes development of Identity Connectors using Identity Connector Framework (ICF) for managing users from Identity Provider to SaaS Applications

•Excellent knowledge in Java/J2EE programming, HTML and JavaScript

•Strong skills in Data Warehousing with comprehensive understanding of all aspects of data modelling.

•Strong skills in Pentaho Data Integration development tool kit used for CA Governance Minder development.

TECHNICAL SKILLS:

•Ping Access, Ping Federate, Ping Directory, Open-SSO, Saviynt

•Open ID Connect (OIDC), OAuth, Multifactor Authentication (MFA)

•Programming Python, Java (Core/Servlet/JSON/JSP/XML)

•Oracle Identity and Access Management, ICF Identity Connector Framework and Manger/Identity

•Linux and Windows

•Cloud security, AWS and Microsoft Azure ID

•SSO (Ping ID, Ping Federate, Oracle, Azure, OKTA).

•Development tools Eclipse, Git, Net-Beans, ReadyAPI

•Databases MySQL and Application servers Apache Tomcat

EDUCATION:

Bachelor of Engineering in Computer Science from St. Peter's University, Chennai, India - 2016.

PROFESSIONAL EXPERIENCE:

Mindtree A Larsen & Toubro Group Company Limited Chennai, India July 2021 – Dec 2023

Project – NOKIA NetGuard

IAM Module Lead - Ping / Security Engineer

Roles & Responsibilities:

•Develop Test cases for IAM modules, review with business owner and test them in IAM module.

•Configuring Routers and adapters for NetGuard, collaborating with cross platform adapters and configuring them in NetGuard.

•Configuring cloud native adapters for security audit and product adapter for customers to minimize the risk.

•Working closely with enterprise applications teams and their respective vendors on setting up SAML configurations for new SaaS applications with identity solutions like Ping Federate.

•Worked on all the Ping Federate OAUTH grant types to get the access token in order to access the protected API.

•Experience in configuring multivendor networks, IAM users, provisioning them with roles and integrate applications with Ping Federate / Ping ID and OKTA for Single Sign On.

•Managed projects for the design, configuration, and implementation of Saviynt, coordinating with vendor leadership, technical services leadership, and end-user customers to ensure successful outcomes.

•Handling Audit compliance manager for NetGuard cloud native adapters and product adapters.

•Checking the Kubernetes logs in case of any issues,

•Involved in troubleshooting the error and restarting the Kubernetes pods.

•Experience in working with cross functional teams to configure the adapter in NetGuard and make them up and running for customers.

•Developed and customized configurations, email templates, workflows, and rules in Saviynt, tailoring the solution to meet specific business needs.

•Worked with SQL staging databases to organize and prepare data before importing it into Saviynt, ensuring data integrity and accuracy within the system.

•Experience in Linux terminals for CLI SSO.

•Maintaining Windows and Linux servers.

•Worked with user provisioning such as Password rotations and user crud operations and creating policies for user group.

•Responsible for installation, configuration, troubleshooting, and on-going maintenance of Identity and Access Management on Linux environment.

•Managing server and data centers operation across windows and Linux.

•Experience in deployment of multiple environments.

Organization: 8K Miles Software Services Pvt. Limited April 2016 – July 2021

Project 4 – DAP 2.0 One Click Senior Associate - Cloud IAM

Roles & Responsibilities:

•Develop groovy scripts for automation testing in ReadyAPI tool on various AWS services like Storage, Injection, Curation, Tag Management services etc.

•API Automation testing for the services required in AWS console.

•Run Jenkins job for testing purpose to check whether the groovy scripts are working fine and troubleshoot errors and failures to get the reports.

•Perform Automation Testing in CICD pipeline and generate reports to meet deliverable requirements.

•Support CIAM with Ping Identity solutions for SSO, MFA, and federation (PingOne, PingID, and PingFederate)

•Compose Use Case documents for building automation scripts.

•Management, Federation, Directory Services, Microsoft ADFS, Microsoft MFA, Azure ADFS, Ping Identity/Federate

•Produce Service specific Test case documentation.

Project 3 – User provisioning

IAM Senior Associate

Oracle Identity Cloud Service (IDCS) is the next generation comprehensive security and identity platform that is cloud-native and designed to be an integral part of the enterprise.

Roles & Responsibilities:

•Facilitating daily stand-upmeeting, supporting team to maintain burn down chart, organizing retrospective, sprint planning and sprint review sessions and encouraging collaboration between Scrum team and Product Owner

•Develop custom identity connector for SaaS Applications using Identity Connector Framework

•Run Contract testing for custom connectors to identify and troubleshoot errors and failures.

•Develop Utility Client with provisioning use cases and automation using Java/J2EE.

•Onboard SaaS Applications with provisioning and SAML abilities onto Oracle IDCS

•Develop Social Identity Provider SDK for SaaS Applications to enable OAuth 3-Legged Authorization from Oracle IDCS

•Perform analysis and documentation of user provisioning model for multiple SaaS Applications.

•Compose Use Case documents for building automation scripts.

•Produce Application specific Test case documentation.

•Perform End-to-End testing for SAML SSO and User Provisioning integration's.

•Integrate applications to OKTA using SAML 2.0 & OAuth authentication protocols.

•Perform Automation Testing and generate reports to meet deliverable requirements.

•Played key role in Planning and Defining Scope, Team Leadership, Activity Planning and Sequencing, Time Estimating, Developing Schedules, Creating Charts and Schedules, Monitoring and Reporting Progress, Benefits Realization, Documentation, Risk Analysis, Managing Risks and Issues and Controlling Quality.

Project 2 - SAML SSO Integration

The scope of the project is to integrate various SaaS applications into Oracle Identity Cloud Services, facilitating the users to perform Single Sign-On from IDCS

Roles & Responsibilities:

•SaaS Application SAML Analysis - worked with multiple SaaS Applications (AWS, NetSuite, Slack, etc.) with complete understanding of the Single Sign On (SSO)

•SAML Federation - Configuring Single Sign-On for SaaS Applications

•Java based automation to validate the JSON elements used for integrating the applications.

•Responsible for reviewing the documentation (SOP) for SAML & Provisioning Integrated Applications.

Project 1 - Big Data QA Automation Testing

•The scope of the project includes user profiling, booking maintenance, order tracking and final invoice creation for the same.

Roles & Responsibilities:

•Performance testing using JMeter which includes developing test plan, test scripts and reports.

•Design, Develop and Execute load tests using JMeter.

•Created JMeter Test Cases to measure performance and functionality of web service.

•Developed scripts and scenarios for automated testing new and enhanced web products using Load-runner.

•Involved in rectifying the automated script-based problems in the application reported by the end-users.

Contact this candidate