Access Management Software Development

DERRICK

CHAPMAN

********@*****.***

Houston, TX 77098

SKILLS

• Java Development

• Software Development

• Network and Systems Engineering

• Active Directory

• Azure

• AWS

• Google Cloud Platform (GCP)

• Shell Scripting

• Single Sign-On

• Identity and Access Management

(IAM)

• Role-Based Access Control

• LDAP

• Privileged Access Management

• Identity Lifecycle Management

• Multi-Factor Authentication (MFA)

• Security and Compliance

• Web Development

• Database Management

• Code Debugging

• Technical Documentation and Unit

Testing

• Python Programming

• DevOps

• SaaS/IdaaS

• PKI/Certificate Management

• Cloud Security

• Ping Identity

• Ping Federated

• Ping Access

• Sailpoint IIQ

• IBM Security Verify Identity

• IBM Security Verify Access

• IBM Security Directory Server

• IBM Security Director Integration

• RSA SecureID

• One Identity Manager

PROFESSIONAL SUMMARY

Senior Architect/Engineer with over 28 years in IT Infrastructure Design, Implementation, Systems Administration, IT Security and Software Development. Proven track record with Implementation, Design and Development with Identity and Access Management, Systems and Network Design. 18 years of experience in the Identity and Access Management space along with Single Sign-On, Access Control, Governance and Attestation, Cloud Technology and Security. WORK HISTORY

Costco IT –

Senior Software Engineer Developer/Architect

05/2024 – Current

• Implementation and Support of IBM Security Identity Manager

(Appliance Base)

• Development of Workflows with Java/Java Script

• Repository from Custom Data Repository into IBM Tivoli Directory Server

• Configuration of SAML 2.0 Identity Provider Federation

• Configuration of Service Providers for Partners

• Support and Configuration of ISIM 7.0

• Full workflow Development and Administration of ISIM

• Implementation of IBM Security Access Verify and IBM Security Access Identity

• Development of Assembly Lines using Security Directory Integrator

(SDI)

• Migration of IBM Security Identity manager to Sailpoint IIQ

• Development of Sailpoint IIQ Workflows, Task, Rules and Policies

• Integration between Sailpoint IIQ and SAP Connectors for SAP Account Provisioning

• Integration between Sailpoint and Azure/AD for Account and Identity Provisioning

• Integration between Sailpoint IIQ and GCP (Google Cloud Platform) for Account Provisioning.

• Configuration and Development of AWS Cloud Solutions for integrating Sailpoint into AWS EC2 Instances

Quest Software –

Senior Software Engineer/Architect

09/2021 - 04/2024

• Implementation of Quest Safeguard Authentication Services – Both Pre-Post Sales Engagement

• Sales Support and Consultation/Implementation of One Identity Safeguard Solution Suite, including Quest Quick Connect

• Safeguard Authentication Services

• Active Roles

• Safeguard for Privilege Passwords

• Safeguard for Privilege Session

• Defender (MFA)

• One Identity Password Manager

• Solaris

• Quest Quick Connect

• Redhat Linux

• WebSphere

• Oracle

• DB2

• Auth-U

• 3DS

EDUCATION

Bowie State University

Expected in 05/2026

Computer Information Systems

Strayer College

05/1992

Computer Systems Engineering

CERTIFICATIONS

• NERC/CIP Certification, 2013

• CISSP, 2013 (Re-Certification 2018)

• Tivoli Identity Manager 5.1 - 2009

• Tivoli Identity Management 4.6 -

2007

• Tivoli Consultant Training

(Framework, User Administration,

Software Distribution, Distributed

Monitoring, Austin TX, 1999

• UNIX Systems Administration

(Advanced UNIX Systems

Administration - Solaris 1.x, UNIX

Systems Administration - Solaris 2.x,

Solaris NIS+ Administration, Solaris

2.x Server Administration), Sun Micro

Systems, Columbia MD, 1992

• Sales Support and Consultation/Implementation of One Identity Defender MFA Solution

• Sales Support and Consultation/Implementation of One Identity Active Roles.

Freddie Mac - Senior Software Engineer

12/2017 - 09/2021

• Implementation of RSA Authentication Manager 8.3

• Migration of RSA Authentication Manager 8.3 to 8.4

• Integration of RSA Authentication Manager with CyberArk for Multi-factor Authentication

• Integration of RSA Authentication Manager with Red Hat Open Shift using API

• Integration of RSA Authentication Manager with PING Federate

• Daily support of PING Federate 9.3

• Daily support and Administration of Ping Access 7.1

• Daily Support of RSA Authentication Manager Infrastructure

• Migration and Development of ISAM Policies using Ansible Scripts

• Implementation and Configuration of CA ETrust V12

• Development of CA ETrust Rules.

Blue Cross Blue Shields of Massachusetts – (12 Month Contract) Senior ISIM/ISAM Systems Engineer

10/2016 - 11/2017

• Implementation of ISAM 9 Appliance

• Integration of ISAM with Docker

• Configuration of Federation Module for IBM Cloud Identity using IBM Cloud Identity Connect

• Custom User Interface Creation and Development using Java Applets

• Data Migration of User Repository from Custom Data Repository into IBM Tivoli Directory Server

• Configuration of SAML 2.0 Identity Provider Federation

• Configuration of Service Providers for Partners

• Support and Configuration of ISIM 7.0

• Full workflow Development and Administration of ISIM. Oracle Corporation - Senior IAM Architect/Implementation Consultant

06/2012 – 10/2016

• Design, Implementation and Configuration of Oracle IAM Products

• Implementation, Design and Configuration of Oracle Identity and Access Management Solutions

• Worked with Sales Reps to deliver Proof of Concepts, demos and high level Presentation to Public Sector Customers

• Met with clients to discuss their current business practices governing Identity and Access Management

• Provided oversight and analysis of current tools or solutions to architect and design a new solution to perform access control, governance and provisioning

• Conducted onsite assessments and evaluation of hardware to determine compatibility of IAM Solutions

• Delivered detailed design documents and assessment test results to customers

• Provide Advance engineering support to Professional Services and Sales Consultants who encounter issues presenting and/or deploying Oracle Identity and Access Management Solutions

• Implementation and Configuration of Oracle Directory Services

(OUD, OID, ODSEE Product.

Artech Information Systems - (1 Year Contract)

Sr. IDM/IAM Software Integration Architect

03/2011 - 05/2012

• Design, Implement and support of large Identity Management Solution for IBM Global Services Customer

• Implementation Tivoli Identity Manager (ITIM 5.1) and Tivoli Access Manager Solution (TAM 7)

• Configuration of WebSphere, DB2 and HTTP Applications in conjunction with TIM and TIM implementations

• Configuration of WebSeal with Tivoli Access Manager for protecting Web Based resources, including configuring Junctions, Reverse Web Proxy, ACLs and Rules.

Deloitte and Touché - IDM/IAM Manager

12/2008 - 03/2011

• Management and Implementation of idM/IAM Solution for Federal Customer and Commercial Customers

• Managing the Implementation, Design and Delivery of Identity and Access Management Solutions

• Implementing, Architecting and Deploying Tivoli Identity Manager, Tivoli Federated Identity Manager (TFIM) and CA-Site Minder for Federal Clients

• Business Development

• Wrote Detailed SOWs and created Project plans for Consultants performing onsite implementation of IAM Solutions

• Managing Resources for Deloitte Federal Customers. Deloitte and Touché - Senior Consultant

11/2006 - 12/2008

• Writing of Java Script with IDI for HR Feeds

• Java programming for advance Adapter Creation

• Configuration of Send mail service for notification and monitoring alerts

• WebSphere Network Node Manager and Cluster Configuration

• Password Synchronization Configuration through ITIM

• Implementation and Configuration of Tivoli Access Manager for E- Business and Operating Systems

• HTTP Configuration for SSL

• Use of PKI Policies to create, manage and distribute digital certificates for ITIM Adapters and WebSphere CA Certificates. IBM - Senior Security Architect

06/2002 - 10/2006

• Designed and Implementation of advanced idM Security Solutions for IBM Customers World Wide

• Managing the Implementation, Design and Delivery of Identity and Access Management Solutions

• Implementing, Architecting and Deploying Tivoli Identity Manager, Tivoli Federated Identity Manager (TFIM)

• Wrote Detailed SOWs and created Project plans for Consultants performing onsite implementation of IAM Solutions

• Managing Resources for IBM Customers

• Assembly Line creation through IBM Directory Integrator

• Writing of Java Script with IDI for HR Feeds

• Java programming for advance Adapter Creation

• Configuration of Send mail service for notification and monitoring alerts

• WebSphere Network Node Manager and Cluster Configuration

• Password Synchronization Configuration through ITIM

• Implementation and Configuration of Tivoli Access Manager for E- Business and Operating Systems

• HTTP Configuration for SSL

• Use of PKI Policies to create, manage and distribute digital certificates for ITIM Adapters and WebSphere CA Certificates. Defense Intelligence Agency

Senior Unix Systems Engineer

June 1992 – May 2002

• Implementation Tivoli Identity Manager (ITIM 4.5) and Tivoli Access Manager Solution

• Configuration of WebSphere, DB2 and HTTP Applications in conjunction ITIM implementation.

• Installed Solaris on local domains primary server, UltraSPARC-II and SPARC 20 Servers.

• Completed server setup with layered products, NIS+, Automounter.

• Configured client Sun Systems using Sun's Jumpstart Procedures

• Setup NFS disks sharing between the SUN, and Windows NT workstation

• Managed accounts using the Tivoli System Administration Tools.

• Managed disk utilization with NIS+, NFS and auto mounting.

• Wrote Perl, borne and c-shell scripts that are used to maintain Unix file systems.

• Installed and Configured 2 Domain Controllers for DIA's Windows NT 4.0 implementation.

TECHNOLOGYSTANDARDS

• FEDRAM

• NIST

• FISMA

.

Contact this candidate