Associate Consultant, Senior Software Engineer, Assistant Manager, IAM Engineer, IDAM engineer

Led the integration of multiple third-party applications with PingFederate for Single Sign-On (SSO) using SAML, OAuth,
WS-Fed & WS-Trust Federation protocols.
Acted as a Level 3 resource, collaborating closely with clients to gather requirements, define project scopes, and ensure
alignment with business objectives.
Demonstrated expertise in PingFederate administration, managing standard identity protocols
(SAML, WS-Federation, WS-Trust, OAuth) and customizing configurations to meet specific client needs.
Successfully served as both Identity Provider (IdP) and Service Provider (SP) for on-premise and
SaaS applications, facilitating seamless application integrations and ensuring secure SAML transactions through metadata
exchange and digital signing certificates.
* Configured Opentoken adapters, agent-config files, and IdP connections to support application decryption and integration,
enhancing overall system interoperability and security.




Implemented complex datastore configurations, password validators, selectors, and adapters
(HTML/composite/IWA/Kerberos), along with policy contracts and authentication policies to enforce stringent security
measures and compliance requirements.
Proficiently utilized PingID, PingOne, and PingDirectory technologies, employing OGNL expressions for customizations and
ensuring robust authentication and authorization mechanisms.
Gained foundational experience in Google Cloud Platform (GCP) and familiarity with Ansible scripts, leveraging cloud
infrastructure and automation tools to optimize IAM operations.
Provided 24x7 client support via bridge calls, prioritizing and resolving issues promptly to ensure high availability and
reliability of IAM systems.
Managed end-to-end lifecycle of PingFederate installations, upgrades, OAuth integrations, SCIM provisioning, and annual
renewal of PING digital signing certificates and SSL certificates.
* Led the implementation of production change requests (CRs), ensuring seamless deployment and integration while
adhering to established change management processes.
* Mentored and supported offshore teams, facilitating knowledge transfer, skill development, and effective team
collaboration to deliver superior client service and project outcomes.

Led initiatives to integrate multiple third-party applications with NetIQ Access Manager (NAM) using Kerberos
Authentication and providing Single Sign-On (SSO) capabilities using SAML, OAuth, WS-Fed & WS-Trust Federation
Protocols.
Played a key role in protecting web server resources through NAM Access gateway configurations, ensuring secure access to
applications and data.
Conducted Proof of Concepts (POCs) to optimize Active Directory (AD) licensing costs by enabling Novell eDirectory and
integrating Office 365 with NetIQ Access Manager, successfully demonstrating cost savings and enhanced operational
efficiencies to clients.
Implemented AWS integration with NetIQ Access Manager for Role Based Authentication, utilizing Risk Based Authentication
(RBA) policies based on IP, X.509 certificates, device attributes, and geo-location data to enhance security posture and user
experience.
Managed end-to-end installation, configuration, and customization of NAM components, including IDP server setups,
cluster expansions, and load balancer configurations to ensure high availability and scalability of IAM infrastructure.
Expertise in configuring Kerberos authentication settings, generating keytabs, and creating SPNs to facilitate secure
authentication processes across integrated applications.
Successfully integrated over 25 SAML applications and Access Gateway applications, utilizing WS-Trust (Active
Authentication) and WS-Fed (Passive Authentication) protocols for seamless single sign-on experiences.
Led initiatives for SSL certificate management and renewal activities, ensuring continuous availability and security
compliance of NAM deployments.
Independently managed client meetings, including project kickoffs, troubleshooting sessions, testing phases, Go Live events,
and Change Advisory Board (CAB) calls, ensuring effective communication and alignment with client expectations
throughout project lifecycles.
Developed and deployed automated Access Manager Certificate Expiry Notification Scripts, enhancing proactive
management of digital certificates and ensuring timely renewals to prevent service disruptions.
Received numerous client recognitions for proactive support, troubleshooting complex issues, and delivering high-quality
solutions that exceeded client expectations.
Provided comprehensive end-to-end support for IAM systems and applications, including incident management, problem
resolution, and knowledge base article development, ensuring service level agreement (SLA) adherence and customer
satisfaction.
Contributed to technical documentation for IAM integrations, ensuring clarity, completeness, and adherence to best practices
and industry standards.