Sr. Idam Architect/sailpoint Lead Resume
TampA
SUMMARY
- Worked as an Identity and Access Management Solution Architect, Advisor, Sr. IDAM Architect, SSO Architect, Solution Designer, SSO Lead
- Expert on building infrastructure in on premise, Amazon Web Service, Oracle Cloud platforms.
- Extensive work experience in design, architect, development, integration, implementation & support using SailPoint IIQ, Oracle IDM, BMC Control - SA, OOAD, JEE architecture, Design Patterns, Data Model, Core Java/J2EE, Spring, Hibernate, JMS, JSF/ JSON/ JSP/MVC/Struts, Web Services(REST/SOAP), SQL, PL/SQL, TSQL, Unix Shell Script, UML, AWS/Cloud technologies, SDLC Processes/Procedures and industry standards tools & technologies
- Expert on Identity and Access Management technologies using Oracle Access Manager(OAM) 12c, 11g R2 PS3, 11g R1 and 10g, Oracle Identity Manager(OIM) 11g, Oracle Identity Federation(OIF) 11g and 10g, Oracle Adaptive Access Manager(OAAM) 11g, Oracle Single Sign On(OSSO) and LDAP’s such as Oracle Internet Directory(OID) 11g and 10g, Oracle Unified Directory(OUD), Oracle Virtual Directory(OVD) 11g and 10g, Oracle Unified Directory(OUD) 12c, 11g, Oracle Directory Server Enterprise Edition (ODSEE) 4.2, 5.1, 6.1, 7.0, 11g, Oracle database, Active Directory(AD), Tivoli Access Manager(TAM), Sun One Access Manager (Open SSO), CA Site Minder, Ping Access and Sail Point.
- Adept in end-to-end development, configuration, customization & integration of software projects/products from requirement analysis to system study, solution, designing, coding, testing, de-bugging, integrating with ERP/ Mainframe/ Legacy/ Mule ESB/ MQ/ SSO/ TIBCO/ Workday/ LDAP/ SailPoint SSD/ Sun IdM/ BMC Control SA/ IT Portals/ B2B/ B2C system and Production rollout in adherence to CMM/Advanced-V SDLC model and Agile (Scrum) methodology
- Expert on building Multi Data Center (MDC) setup, Disaster Recovery (DR), Capacity Planning, Load Balancing and failover configuration, Clustering and High Availability, SSL configuration, Performance Tuning for web applications to integrate with Identity and Access Management Technologies and building IDAM Infrastructure setup. experience in IT Security, mainly in Privileged Identity Access Management.
- Experienced in the configuration, deployment, integration and administration of servers and applications in CyberArk.
- Experienced in the configuration of Vault, Password Vault Web Access (PVWA), Central Password Manager CPM) and Privileged Session Manager (PSM).
- Created and maintained user accounts in compliance to management security Access Control safeguards policy
- Onsite transition experience for migration of Access Control process for more than 200 applications.
- Experienced in managing users for various types of accesses in Active Directory/LDAP.
- Experienced in managing users in CyberArk, LDAP, Business Objects, SAP, Atlas, Sailpoint, RSA, McAfee, Swift, Flexcube.
- Experienced in leading a team as well as managing projects.
- Excellent training, mentoring and problem-solving skills.
- Strong and In-depth Knowledge of Oracle JDEdwards Enterprise One (E1 JDE) Integration with OAM for Single Sign On (SSO) in on premise and private cloud deployments
- Strong and In-depth Knowledge of Oracle E-Business Suite 11i, R12.0.x, 12.1.x Integration with OSSO and OAM
- Successfully delivered 38 IDAM SSO integration projects using Oracle Access Manager, Oracle Single Sign On, Tivoli Access Manager, Sun One Access Manager, Site Minder integration with Java based web applications, JDEdwards Enterprise One (E1), Oracle E-Business Suite, Web Center Portal Applications, UCM, Siebel CRM and ATG E-Commerce applications, Liferay and JDEdwards Enterprise One (E1) Mobile Applications and SAML 2.0.
- Worked in Oracle product development team for Oracle E-Business Suite SSO (OAM & OSSO) Integration
- Architected, designed and developed Oracle E-Business AccessGate product to integrate Oracle E-Business Suite with OAM product while working . This product is very successful in the market.
- Hands on experience on setting up IDM infrastructure on Exalogic and Exadata systems, Internet and Intranet applications, External and internal users and heterogeneous systems
- Reviewed Security infrastructure for Cross Site Scripting, DOS and DDOS attacks, SQL Injection, Security Vulnerabilities etc. for Principal Financial Group (PFG)
- Lead on Capacity Planning, Clustering, Load Balancing and Failover configuration of Directory Servers and Identity and Access Management Servers, Web Servers and application servers for complex environments
- Expert on Java, J2EE, Struts, JSF and Oracle development projects before started working on IDAM projects.
- Strong knowledge on Application servers - Web Logic, OracleAS, JBOSS and Web Servers OHS, Apache
- Strong analytical & problem-solving skills with very good mathematical back ground and troubleshooting skills.
- Expert on LDAP DIT Design, Web Application Design and architecting
- Very Good Knowledge on Oracle Processes and follow-up’s on oracle products.
- Expertise on the Linux, Solaris SPARC, Windows Servers Operating Systems.
- Attended CISSP workshop and currently preparing for CISSP Certification.
- Extensive client interaction with clients that are located in different geographic locations like UK, USA, Singapore, Germany, Canada, Australia, Dubai etc. to address the business-critical problems, requirement gathering, gap Analysis, trouble shooting and RCA
- ** Received Best Performer Award in EDS.
TECHNICAL SKILLS
- Sailpoint
- Oracle Access Manager (OAM) - 12.2.1.3, 11gR2 PS3, 11gR1, 10g
- Oracle Internet Directory (OID) 11g, 10g
- Oracle Directory Server Enterprise Edition(ODSEE)11g
- Oracle Virtual Directory (OVD) 11g, 10g
- Oracle Unified Directory (OUD) 12.2.1.3, 11g
- Oracle Adaptive Access Manager (OAAM) 11g
- Oracle Identity Manager (OIM) 11g, 10g
- Oracle Identity Federation (OIF) 10g, 11g
- SAML 2.0
- Ping Access
- Sail Point
- Oracle Single Sign (OSSO) 10g
- Sun One Access Manager (Java One/Open SSO)
- Tivoli Access Manager (TAM)
- Site Minder
- Active Directory (AD), ADLDS
- Java, J2EE, JSP, Servlets, Servlet Filters
- Struts, JSF
- Oracle Database
- Oracle E-Business Suite 11i, R12.0.x, 12.1.x
- Web Logic Server (From 6.1 version to 12c)
- Oracle Http Server (OHS) 1.0, 2.0, 11g
- Apache Http Server
- Oracle Application Server
- Oracle BI Publisher Reports
- Red Hat Enterprise Linux (RHEL)
- Solaris SPARC
- Exalogic, Exadata
- Windows Sever 2008 R2, 2012R2
- Amazon Web Services
PROFESSIONAL EXPERIENCE
Confidential, Tampa
Sr. IDAM Architect/SailPoint Lead
Responsibilities:
- As an Sr. IDAM Architect review and understand the application and recommend appropriate solution for application adopting to Fed SSO, SSO, Non-SSO and applying controls to non-sso applications. Working with all LOB leads across organizations and acting as interface between LOB Leads and product owner.
- Presentation and Demo on IdentityIQ 8.0 & 8.0p1 new features, special considerations, user case scenarios, setting up and walk through in IHG environments. Worked with SailPoint Sales team to provide Demo on IdentityAI to IHG core team. Understanding of current potential production issues and providing workable solution.
- Application onboarding, developing connector/interface, defect fixing, Understanding of current performance issue and providing optimal solutions, POC for managing problem, issue, escalation, SLA & onsite/offshore team with respect to MyId service. Conducting daily stand up meeting with client & offshore team.
- RCA of potential incidents. Analyzing performance related issue on Tasks, forms & IIQ instances and providing optimal solution to upgrade/add server components in each tier. Managing the communication among onsite-offshore team members and other project stakeholders.
- Communication with customer, stakeholder/intra/inter management. Participation on code review, test result review, production release review, sprint planning, SLA review and SMR meetings.
Environment: SailPoint (IdentityIQ 8.0p1/7.3p3, IdentityNow, IdentityAI), Java EE (1.8), REST, JSON, XML, XHTML, JSF, Beanshell, Eclipse Java EE IDE/MAT, Apache Tomcat, GITHUB, Unix shell / MS Powershell, Oracle 11g, LDAP/Active Directory, SSO, WorkDay, CyberArk, Salesforce, JIRA, Linux, Windows 10/NT Server, WIN SCP, Putty, JIRA, Beyond Compare, ESB, Postman, kerberos, PAM, SQL Developer, Notepad++, MS Office 2007(Project, Visio, PowerPoint, Word, Excel, SharePoint), Teams, Splunk, AppDynamics, Kibana, Wikispaces, ITSM/ServiceNow
Confidential
Security Architect and IAM Consultant
Responsibilities:
- Troubleshoot existing environment issues, write custom OAM plug-in.
- Lead requirements gathering and solution design, mapping business and technical requirements to solutions as per current implementation of SailPoint toolset.
- White board solution options/design discussion with the stakeholders and explain pros and cons of each option.
- Analysis real time production environment issues & defect fix on LCM, Workflow, Roles, Policies and Certifications for governance compliance, Access, Identity refresh, schedule tasks, correlation, etc. Integration of Splunk with SailPoint logs to search, monitor, alert, diagnosis problems, reports & various metrics for business operations.
- Designed and implemented various monitoring tasks/rules for alerting support team on production environment issues as part Remediation team.
- Lead All Access Platform related application development & maintenance team.
- Created & monitored HPSM/ServiceNow/JIRA ticketing tools to create tickets for troubleshooting production issues and business requirements.
- Working in collaboration with interfacing team, IT Security/SOX/NPI Auditor, Senior Managements, Architect Team, QA team and clients to effectively deliver solutions in-time with quality.
- Provided support for System & E2E testing and resolving/escalations any issues with the users/interfacing systems.
- Tracking and clarifying defects with SME/users during integration and testing.
- Manage customer support, education, enablement and production hand-off process.
- Client wanted to have a strategic direction to increase their IAM maturity level. Improve existing manual process and Increase efficiency by automation.
- Received client appreciation award for my work.
- As an Identity and Access Management consultant assessed existing IAM environment. Developed strategy and roadmap for Corning IAM in short, medium, and long term.
- Assessed current and future state. Performed gap analysis. Improved existing process and efficiency resulting in saving time and cost
- Developed and optimized solution for Self Service Password Reset and increased user SSPR adoption.
- Collaborated with architecture community to align Security technology roadmap with enterprise technology strategies
- Developed and review domain technology roadmap by mapping business capabilities and technology capabilities to define target state and roadmap
- User Self-Service User Registration, Login, Change Password and User Unlock configuration with Microsoft Azure B2C.
- User token-based authentication and authorization using OpenID Connect and OAuth 2.0 with API integration.
- Maintained an in-depth understanding of the security standards and technologies
- Designed and implemented Risk Based Authentication (RBA) based on low and high-risk access levels with device finger prints and MFA (Multi Factor Authentication).
- Multi factor authentication with One Time Password (OTP) implementation using SMS over mobile and email.
- Worked on Azure AD to sync password from AD using NIM connector.
- Worked in Micro Focus NetIQ Identity manager and NetIQ Access Manager
- Designed automated provisioning solution. Created application onboarding template for ease of application onboarding
- Developed IAM vendor product evaluation template which can be utilized for multiple Identity management and Access Management products
Technologies: Oracle Access Manager (OAM) 11gR2, RSA, Oracle Transport Management (OTM), Hyperion, SailPoint IdentityIQ 7.X(IIQ, SSD/SSB/SSF/SSP/SST), Core Java/JEE (JDK1.7/1.8), SOAP Web Services(Apache Axis2)/REST (Jersey 3.0), JSON, XML, XHTML, JSF, Beanshell, Eclipse Java EE IDE, JUnit, Apache Tomcat, AWS, Unix shell / MS Powershell / Batchrun Script, Oracle 11g, MS SQL Server, BMC Control SA, Sun IdM, LDAP/Active Directory, Centrify, Entrust, Mainframe, Teradata, ITSM/ServiceNow, SalesForce, Workday, GITHUB, JIRA, Linux, Docker, Windows 10/NT Server, WIN SCP, Beyond Compare, MS Office 2007(Project, Visio, PowerPoint, Word, Excel, Sharepoint), CyberArk, Splunk, Agile methodologies
Confidential
Sr. IAM Architect
Responsibilities:
- Requirements understanding, Building of OAM 12c MDC infrastructure in 6 data centers in On premise and Amazon Web Service (AWS) Platform, Disaster Recovery (DR), Infrastructure Setup, Implementation, SSL Configuration, Performance Tuning.
- This project is to build OAM 11g R2 PS3 Infrastructure with Oracle Access Manager 11g R2 PS3, Oracle Virtual Directory11g, Oracle HTTP Server(OHS)11g and ADLDS with High Availability, Clustering and Failover, SSL configuration in production environment to integrate with Online Banking Web applications, Native Mobile Applications and integrate external applications for Federation for Single Sign On (SSO) functionality.
- Requirements understanding, Architecting and Designing of OAM 11g infrastructure Capacity Planning, Disaster Recovery (DR), Infrastructure Setup, Implementation, SSL Configuration, Performance Tuning.
Technologies: Oracle Access Manager (OAM) 11gR2 PS3, Oracle HTTP Server (OHS), Oracle Virtual Directory (OVD) 11g, ADLDS, Web Logic 11g.