Single-threaded leader responsible for security reviews, penetration testing, and tooling for AWS Generative AI services and features, including Bedrock, Amazon Q for Business, and Q Developer. Enabled secure availability of models from partners like Anthropic, Meta, and Mistral on Bedrock. Established a security bar and testing methodology for evaluating and calibrating models and Gen AI applications against security and responsible AI tenets.#AppSec #Pentest #GenAI #LLM

Single-threaded leader responsible for holding high-security bar for 40+ AWS Services across Database, Search, Analytics, and Storage service lanesOffered Title: Head of Product Security, Database and Storage Services #ProdSec #AppSec

Part of leadership team reporting to SVP, Head of Cyber Security IAM, and M&A. Responsibilities include Deliver reference architecture for the hybrid cloud which provides seamless access solutions to both on-premise and cloud assets with a mix of untrusted networks and PCI compliant workloads from M&A entities.Collaborate and Deliver vision and strategy for Cybersecurity IAM programs (B2E, B2B, B2C) which will leapfrog security posture and set ambitious goals and tone for the future.Collaborate with other technology and business stakeholders and deliver secure integrations and security solutions that are easily pluggable Vendor evaluation, build vs buy Team management #Engineering #IAM #Identity #Architecture #Strategy

As an engineering leader my team delivered multiple critical in-house engineered security solutions to harden Visa's Security program.Initiatives includeEphemeral certificate-based access to enable passwordless just-in-time(JIT) access for Linux and Unix systemsEnterprise SSO program that supports seamless login experience for on-premise and cloud (AWS) applications. Program highlights include MFA/2FA support and intelligent step-up authentication using FIDO2 Yubikey and HID access cards. Support for RADIUS authentication for network devices and terminal-based platform services New generation Unix privileged access management tools' development using a suite of products that include a customized Open Source Sudo module with greater security controls based on a patented Crypto Solution, a highly scalable remote HTTP endpoint for centralized collection of session logs, Kafka for data streaming, and Elastic & Kibana components for security analytics and threat hunting. Account Activity Monitoring for applications that involve data feed collection from SIEM(Splunk, Sumologic), anomaly detection using patterns & machine learning models, integration of data feed with IAM for effective enforcement of policies and reporting modules. This initiative covers the tighter controls required per the CSC maturity model (Critical Security Controls Maturity Model) for High & Critical applications Fully Featured Crypto Key Management solution that generates, distributes, manages and audits the crypto keys based on NIST FIPS140-2 standard. Patented approach to provide a crypto seed for systems to operate without them connecting to key manager.#Kafka #Elastic #API #CyberSecurity #IAM #PAM #Sudo #Linux #Unix #ForgeRock #SAML #OIDC #OAUTH2 #SSO #Sailpoint #Sumologic #Splunk #SIEM #OIM #Elastic #Kafka #scikit-learn #aws #bastion #ISO27002 #NIST800-53 #CIS #CSC #SOX #PCIDSS #GDPR #Zerotrust #AWS #Azure

Oracle OIM product implementation, customization, and security strategy for identity and access management. Performance tuning expert for OIM and middleware.Primary functional modules include Identity Certification and attestation of applications and entitlements. Technical deliverable includes workflow customization using SOA, UI customization using ADF/OIM APIs, and Data analysis on heavy OIM data to make certifications reliable and saneMitigated solutions to improve performance by 10 x for certification creations. and played a key role in the completion of the biggest annual certification process that includes a total of 700K assignment re-validations for Entitlements, Roles, and Applications. Customized the reassignments and delegation process for ease of use. Designed the initial layout for the independent web app for certifications instead of cumbersome OIM UI and worked with the vendor for the completion of development of web app, integrations with OIM, training to administrators and end-users, and successfully completed the annual re-validation campaign with a new solution.Worked as a performance specialist, to debug the complex OIM issues & Middleware processes to mitigate bad user experiences, slow schedule jobs, and inherent OIM issues. Been successful in getting worked with Oracle to get the solutions for the OIM inherent performance issues. Represented the customer while dealing issues with Oracle worked with Oracle escalation managers, Support and Dev teams.

Played key role in the development of the products Product Information Management (PIM), Cost accounting(CST) and Supply Chain Financial Orchestration (SFO) to make them release ready. Responsibilities:Authored Technical Design Documents based on functional design inputs from product managers. Holds ownership of these modules Events management (Interaction channel for upstream systems with SFO) Cross Reference (Understanding foreign system details to native terminology) Task layers & Connectors (Interaction channel for SFO to interact with downstream Costing systems) Financial trade agreements creation setup UI ( ADF UI)Designed database schema for the above modules, authored technical design documents and developed the modules using SOA, ADF, PL/SQL and made them release readyHandled financial orchestration for Gloabl Procurement Internal Drop ShipmentCustomer Drop ShipmentService Purchase OrdersConsigned Purchase OrdersInternal Transfer Orders

Completely involved in the design of new modules for the product, Supply chain Financial Orchestration. Authored technical design documents, developed database schema, developed model layer bare bones in ADF, SOA and PL/SQL.

Started with the Oracle PIM product stabilization and involved in the design discussions for the new product supply chain financial orchestration

Worked as a consultant from TCS to Ericsson Denmark. Initially worked on automation test scripts in JAVA and later moved to development. Worked on developing firmware coding for Ericsson network boxes. controlling using SNMP protocol etc.

Extensively trained for software technologies starting C to JAVA & .net. Trained on six sigma methodologies and put into Access Control Systems stream for work. Worked on RIM mobile app development and proof of concepts

Picked by Prof. Kesav Vital Nori, VP, TCS R&D Cybernetics Center in a college collobration function to work under him before finishing course work.https://www.linkedin.com/in/kesav-vithal-nori-069758bWorked as a research associate under Prof Nori. Worked for devloping proof of concepts and presentations for his research work and thesis. Developed algorithms needed for data analysis and systematic presentation of data