06/04/2026 updated
100 % available
IAM Architect | Okta | Keycloak | Entra ID | Auth0 | SAML SSO | OAuth
Pune, India
Worldwide
Bachelors in Computer ScienceAbout me
I am A top performer in Identity and Access Management (IAM), specializing in SSO solutions and authentication integrations. Successfully implemented robust single sign-on systems using Okta, Keycloak, and Microsoft Entra ID for diverse enterprise environments.
Identity ManagementKerberos (Protocol)Lightweight Directory Access Protocols (LDAP)OAuthOpenLDAPRole-Based Access ControlOpenid ConnectSecurity Assertion Markup Language (SAML)Single Sign-On
SSO and Identity Access Management(IAM) Expert
Hello, I have technical experience in Identity and Access Management, I specialize in ensuring that only authorized individuals can securely access digital systems. I'm an expert in SSO (Single Sign-On), using various methods like SAML, OpenID Connect, OAuth 2.0, and others to simplify and enhance login security. I have expertise with open source and commercial SAML implementations (Keycloak, miniOrange, Shibboleth, SimpleSAMLphp, Okta, OneLogin, and more) to establish these secure login mechanisms. I am proficient in any programming languages including PHP, Java, JavaScript, Python, Golang, Shell Scripting, and others, alongside various frameworks like Spring, SpringBoot, Node.js, React, Angular, Django, WordPress, CodeIgniter, Symfony, Laravel, Gin, and more.
I've supported numerous clients in multiple ways, such as:
✅ Securing custom applications with SAML-based logins.
✅ Resolving login-related issues across various systems associated with SAML OAuth, Identity Providers and Service Providers.
✅ Deploying different SAML and OAuth Identity Providers (IDPs) and Service Providers (SPs).
✅ Configuring secure logins for different systems.
✅ Designing optimal architectures for integrating SSO technologies like AD, LDAP, OAuth, OpenID Connect, CAS, Kerberos, JWT, multi-factor authentication, and more. ✅ Providing extensive training, meticulous documentation, and dependable third-party support.
✅ Creating and implementing robust architectures for LDAP solutions (OpenDJ, OpenLDAP, IBM Security Directory Server), focusing on high availability and customized schemas.
✅ Proficient in deploying LDAP proxy and bridge solutions, as well as Reverse Proxy setups like nginx and Httpd.
✅ Implementing role-based access control and risk-based access control within Identity management solutions.
✅ Demonstrated experience of 6 years in Linux-based OS including Arch Linux, Ubuntu, CentOS, Redhat, etc.
Additionally, I am proficient in DevOps and cloud security, encompassing:
✅ Containerizing applications and platforms using Docker.
✅ Deploying applications on AWS EKS, EC2, and other environments.
✅ Application deployment on Azure and GCP.
In complex integrations, I excel at:
✅ Developing and securing Rest and GraphQL APIs using OAuth and JWT tokens.
✅ Integrating API gateways to ensure seamless API operations, including API Authorization, and more.
Hello, I have technical experience in Identity and Access Management, I specialize in ensuring that only authorized individuals can securely access digital systems. I'm an expert in SSO (Single Sign-On), using various methods like SAML, OpenID Connect, OAuth 2.0, and others to simplify and enhance login security. I have expertise with open source and commercial SAML implementations (Keycloak, miniOrange, Shibboleth, SimpleSAMLphp, Okta, OneLogin, and more) to establish these secure login mechanisms. I am proficient in any programming languages including PHP, Java, JavaScript, Python, Golang, Shell Scripting, and others, alongside various frameworks like Spring, SpringBoot, Node.js, React, Angular, Django, WordPress, CodeIgniter, Symfony, Laravel, Gin, and more.
I've supported numerous clients in multiple ways, such as:
✅ Securing custom applications with SAML-based logins.
✅ Resolving login-related issues across various systems associated with SAML OAuth, Identity Providers and Service Providers.
✅ Deploying different SAML and OAuth Identity Providers (IDPs) and Service Providers (SPs).
✅ Configuring secure logins for different systems.
✅ Designing optimal architectures for integrating SSO technologies like AD, LDAP, OAuth, OpenID Connect, CAS, Kerberos, JWT, multi-factor authentication, and more. ✅ Providing extensive training, meticulous documentation, and dependable third-party support.
✅ Creating and implementing robust architectures for LDAP solutions (OpenDJ, OpenLDAP, IBM Security Directory Server), focusing on high availability and customized schemas.
✅ Proficient in deploying LDAP proxy and bridge solutions, as well as Reverse Proxy setups like nginx and Httpd.
✅ Implementing role-based access control and risk-based access control within Identity management solutions.
✅ Demonstrated experience of 6 years in Linux-based OS including Arch Linux, Ubuntu, CentOS, Redhat, etc.
Additionally, I am proficient in DevOps and cloud security, encompassing:
✅ Containerizing applications and platforms using Docker.
✅ Deploying applications on AWS EKS, EC2, and other environments.
✅ Application deployment on Azure and GCP.
In complex integrations, I excel at:
✅ Developing and securing Rest and GraphQL APIs using OAuth and JWT tokens.
✅ Integrating API gateways to ensure seamless API operations, including API Authorization, and more.
Experience
Professional experience0 - 5 years
Freelancer since2022
Languages
EnglishFluent
Project history
As a Software Engineer at MiniOrange INC, I have gained over 2.5 years of experience in configuring applications that support standard single sign-on protocols such as SAML 2.0, OAuth2.0/OIDC, and JWT Radius. I have successfully implemented enterprise-wide IAM solutions for 70+ critical and business applications, ensuring compliance and lifecycle management requirements are met. Additionally, I have integrated Active Directory with LDAP, LDAP, Kerberos, and NTLM, enhancing the overall security of the systems. My expertise lies in user self-registration processes, user management operations, provisioning, and role-based access control (RBAC)/(PBAC) access approval workflows. I have also established identity governance and administration (IGA) processes and policies, following the principles of Least Privilege/Zero Trust, User Provisioning, SSO setup, Linux, JAVA, furthermore.
Deliver end-to-end IAM solutions for global clients, specializing in SSO integration, identity federation, and authentication troubleshooting across 100+ identity providers. • Implemented Keycloak Multi-Tenancy SSO for SaaS platforms, enabling per-tenant realm isolation, custom authentication flows, and SAML/OIDC federation with enterprise identity providers. • Configured Keycloak Passkey (Passwordless) authentication and MFA modernization for clients transitioning from legacy credential-based systems to FIDO2/WebAuthn standards. • Designed and deployed Okta SSO integrations including SAML 2.0 and OAuth 2.0 app configurations, migration consulting, and lifecycle management for enterprise environments. • Resolved complex CAS SSO integration issues in WordPress environments, implementing authentication bridges and troubleshooting protocol-level handshake failures. • Delivered SSL/TLS certificate remediation for SSO configurations, resolving trust chain and metadata validation issues within hours of engagement. • Built and maintained Terraform-based infrastructure-as-code (IaC) for Okta configurations across dev/staging/production environments, managing SAML/OAuth app provisioning and state management. • Consulted on Auth0, ADFS, miniOrange OAuth, and Microsoft Entra ID configurations for clients across healthcare, education, e-commerce, and SaaS verticals. • Achieved 100% Job Success Score and Top Rated Plus