Goldman Sachs Asset Management, Quantitative Equity Solutions (QES) Technology. Designing and developing solutions for research and portfolio construction for the GSAM Quantitative investment businesses.Involves developing high performance solutions for large data set/big data areas.

Worked in Technology Risk and responsible for Architecture, Development & Design of Access Management and Review platform. Responsible for Wealth Management (WM) Identity & Access Management (IAM) services in the creation of new, reengineered processes and systems. The portfolio contains 8 product areas, 100+ global teams & a $15M+/year budget while its services support ~2500+ internal applications, 50k+ employees /system ids, 16M direct entitlements with 30M/day authorization calls. • Designed and Deployed Custom home grown IAM platform with all aspects of Entitlement management including Access Request, Approvals, Fulfillment (Straight through), Review creation, Auditing, Reviews (Transfer / SOD / ZDAP / Yearly / System ID / Technology Entitlement/ Enterprise Role etc)• Implemented and Redesigned critical authorization services by refactoring service API, caching and parameters which lead to about 85% performance efficiency gains, 70% reduction in traffic which constitute 30M/day authorization calls.• Designed and developed APIs to power the application in Azure cloud with more than 30M user entitlements. Also designed horizontal scaling using Kafka, Strom, MQ’s, SQL which improved peak performance and availability.• Added resiliency for all service calls, improving service availability by more than 35%. Also lead team on CSRF, XSS, CSP and other security initiatives hence improving overall security and certifications.• Led the complete lifecycle of IAM/RBAC (Role based Access Control) products, from ideation to launch and post-launch monitoring.• Designed and developed custom home grown entitlements data warehouse that provides historical, predictive analytics including ~5 AI/ML models for demonstrating the “cause & effect” of user entitlements along with data lineage & risk ranking.· Lead the effort in architecture & delivery of separation of duties (SOD) implementation across WM systems & enterprise roles aimed to mitigate risk of internal fraud.

• Designed and Deployed spring boot services by creating an engine architecture by integrating Varonis Data Privilege (DP) into WM access request, provisioning, reporting & certification tooling. • Led a team of engineers in designing and implementing scalable backend PII Masking solution, leveraging Azure cloud services and implementing DevOps practices for enhanced scalability and reliability• Deployed and integrated microservices for sales book of business, registration, compensation, supporting staff & organization birthright rules to automate the data entitlements to increase 35k+ advisors’ productivity/coverage & reduce 80% approvals.• Led the migration of legacy access management systems to modern microservices architecture, resulting in improved efficiency and reduced downtime.• Deployed “Use It or Lose It” program by instrumenting entitlements usage via authorization services for WM (650+ applications) & implemented ‘auto-revocation’ engine for ‘Out of role’ distributed applications, mainframe & BI entitlements.• Implemented 3rd party application controls framework to enhance the WM IAM controls by enabling governance, alerts & reconciliation of entitlements. • Remediated IT organization persistence access to sensitive & PII enabled entitlements by introducing regular, emergency & self-activation temporary access procedures.• Lead the effort in architecture & delivery of separation of duties implementation across WM systems & enterprise roles aimed to mitigate risk of internal fraud. Further migrated the user-entitlements reviews to the firm program.• Championed part of the yearlong data breach as an IAM SME to Technology & Information Risk, Internal & External Audit, Legal & others to help provide all necessary details to external regulators.• Implemented best practices for code quality, testing, and CI/CD to ensure consistent high-quality release.

• Responsible for Architecture, Development & Design of large-scale Identity Management/RBAC solutions for Mortgage client Government National Mortgage Association (Ginnie Mae) using Oracle IAM Product Suites. • Developed and maintained APIs to support frontend applications and third-party integrations for user registration via Experian.• Developed RESTful APIs and microservices for various applications, enabling seamless integration and interoperability via 3rd party web service calls (MAMS from Ginnie)• Conducted performance tuning and optimization efforts, resulting in improved system response times• Led a team of engineers in designing and implementing scalable backend solutions, resulting in improved system performance and reduced latency (30% reduction in response time)• Collaborated closely with DevOps teams to ensure smooth deployment and operation of backend services• Collaborated with frontend engineers to implement real-time features and ensure seamless user experiences.• Traditional Identity & Access Management solutions such as identity governance administration (IGA) including user lifecycle management and access certification, access management and directory services for large implementations in GenieMae using various technology solutions.• Identity Management implementations including privileged access management (PAM), consumer identity and access management (CIAM) with overlap of data privacy, identity analytics and automation by helping clients strategize and implement solutions to meet needs.

Senior Consultant at Federal IAM practice, responsible for Architecture, Development & Design of large scale Identity Management/RBAC solutions.Technologies Hands on:• IAM products: Oracle Identity Manager 11g PS3, Avecto Defendpoint, Active Directory• Web Technologies: Java, Servlets, JSP, JSF, JSTL, JDBC, JNDI, J2EE Design patterns, Web service, EJB 2.0, spring, Hibernate, DTS Package, SSIS Package.• J2EE frameworks: MVC Architecture, Jakarta- Struts Framework, spring and JSF framework.• Script: Java Script, Shell Script, Perl, PowerShell.• Internet Technologies: Java Script, Web services (SOAP, Restful), XML (SAX/DOM), HTML, DHTML, XHTML, XPATH, CSS, AJAX.• Tools & IDE’s: Eclipse 3.0/3.1, Tomcat, Web Sphere Studio 5.0/5.1, Business Process Editor (BPE), RAD 6.0, MSOffice, Visio, Putty, Win merge, BIDS, SQL server Management studio, DTS Wizard, SQL Editor, SQL Server 2008, Win SCP.• Application Servers: Web Sphere 6.0 (WAS), Jboss, Web Logic.• Web Servers: Jakarta – Tomcat.• Database: PL SQL, MS Access, MYSQL.• Testing and mocking tools: Jmock, JUNIT.

Removal of Local Admin Rights:• Discovered all the Local Admin privileged Users/Groups along with Domain Groups that have Admin Privileges.• Created Scripts to identify all the Assets assigned which have Local or Domain Admin privileges in Active Directory.• Extracted the ADNestedGroups that have Administrative permissions along with the users underneath to it.• Assistance with scoping and selection of a local admin discovery/removal/management tool, includes : Functional, Infrastructure, Performance/impact & professional Services• Identify where access removal would be excessively time consuming or result in significant hardship on end user• Created and Applied GPO policies as No Impact/ interruption to users in there day to day activities.• Remediation of Local Admin Rights via Avecto tool available in market.

• Designed and deployed self-service enterprise J2EE applications for RBAC solution for Role owners & IT owners to onboard application entitlements with granularity, SDLC process & non-prod entitlements management.• Designed and implemented backend systems for high-traffic applications, ensuring data integrity and optimal performance. • Worked on database design and optimization, improving query performance and data retrieval times• Contributed to the evaluation and adoption of new technologies and tools to enhance development and DevOps processes• Implemented DevOps practices, including automated testing and continuous integration, to streamline development and deployment processes• Conducted code reviews, providing feedback and ensuring adherence to coding standards. • Working extensively on incident reduction and Service Improvement Plans for the Application ensuring availability of the application 24*7• Created ETL pipeline & developed various batch jobs for data extractions and reporting using tableau and qlikview. • Deployed and integrated microservices for sales book of business, registration, compensation, supporting staff & organization birthright rules to automate the data entitlements to increase 35k+ advisors’ productivity/coverage & reduce 80% approvals.