D Rahul Email & Phone Number

Fremont, Ca, Us

Menlo Park, California, United States

• Configured and managed Okta Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions, enhancing security and streamlining user access management across applications.• Developed and maintained Okta integrations with internal and external applications, ensuring seamless user provisioning and de-provisioning.• Utilized Terraform to automate and manage infrastructure provisioning and configuration for IAM-related services, reducing manual effort and minimizing configuration drift.• Created and maintained Terraform modules and templates to streamline deployment processes and ensure consistency across multiple environments.• Designed and implemented GitLab CI/CD pipelines to automate the deployment of IAM solutions and updates, enhancing development workflows and reducing deployment time.• Managed version control and branching strategies in GitLab to support continuous integration and continuous delivery practices.• Developed Python scripts for automating routine IAM tasks such as user account creation, role assignment, and access reviews, improving operational efficiency and reducing error rates.• Integrated Python-based solutions with Okta APIs to perform bulk operations and custom reporting.• Applied IAM solutions to meet industry-specific compliance and regulatory requirements, ensuring secure access to sensitive data and systems.• Collaborated with cross-functional teams to understand and address unique IAM needs related to applications and data handling.• Conducted regular security assessments and audits to ensure IAM practices comply with industry standards and regulations, including HIPAA and GDPR.

Rhode Island, United States

•Designed and implemented internal and external applications integration with PingFederate/PingAccess/PingID in DEV/QA/PROD.• Experienced in integrating various applications with Okta to provide SSO as well as user provisioning, deprovisioning and reconciliation.• Provide solution to business on how to integrate applications leveraging enterprise SSO using CASSO, SPS, Ping Access, PingFederate to provide better web and API (web services) security to application users in a gateway or agent model.• Working on all the PingFederate supported standards like SAML protocols, WS-FED, AUTH, OIDC, WS-Trust and implemented SCIM integrations for inbound and outbound provisioning.• Worked on configuring the domains, User Directories, Rules, Realms and Policies.• Configured the end-to-end process for all the Auth and SAML supported applications.• Worked on fixing the vulnerabilities, Missing Patches in all the nodes for Ping access and Ping Federate.• Performed attribute mapping on Okta and provided support for OKTA service/help desk queue - Identifying and troubleshooting issues.• Worked on Ping Access installation and configured with Ping Federate to authenticate and authorize the users for both Web and API based applications.•Experience in configuring and customizing Saviynt platform components to align with organizational security policies, business processes, and compliance requirements.•Designed and implemented RBAC models using Saviynt, defining roles, entitlements, and access policies to ensure least privilege access and compliance.• Implemented SS by Integrating on-prem applications with Okta Infrastructure using SAML, Open ID Connect (OIDC) and Auth 2.0 service.• Technical guidance to development teams to enhance the provisioning application to integrate with Okta using java and REST APIs.•Utilized Terraform to perform vulnerability scanning on infrastructure code and automated security assessments, identifying and remediating potential security risks.

Philadelphia, Pennsylvania, United States

Created application Inventory for 2K applications with Application Name, URL, Agent Name, Agent Group name, Host Configuration Object name, Agent Configuration Object name, and Trusted Host name.• Identified the production Policy Servers difference in registry settings and implemented the changes.• Involved in Site Minder Policy Server upgrade from R6SP5 to R6SP6.• Created the LDAP scripts which monitors the LDAP connectivity and alerts the Admin Group if connection is closed.Created the LDAP scripts which monitors the LDAP connectivity and alerts the Admin Group if connection is closed.• Implemented Scripts on Policy Servers in order to stabilize the environment.•Worked on integrating Saviynt with various enterprise systems such as HR systems, IAM solutions, directories, and applications, ensuring seamless data flow and synchronization.• Worked on integrating Okta with commercial Billing applications.• Worked on troubleshooting the issues encountered in Okta during the application integration with SAML, provisioning of users, importing of users .• Worked on integrating Okta with commercial Billing applications.• Worked on troubleshooting the issues encountered in Okta during the application integration with SAML, provisioning of users, importing of users.•Created different Okta Sign On policies and Okta MFA enrollment policies based on requirement for application ids and different user types.•Worked on AWS CloudWatch for real-time monitoring and AWS CloudTrail for comprehensive logs, aiding in threat detection and incident response•Experience in SAML federation using CA SiteMinder R12 Federation Security Services SAML 2.0 Affiliate Agents.•Managed IAM policies and roles in Terraform to control access to cloud resources, ensuring only authorized users and applications have the necessary permissions.•Integrated and configured web agents to protect and manage resources with SiteMinder Policy Server and assisted applications teams.

Cincinnati, Ohio, United States

• Configured policies on CA SOA Security Gateway Server R12 against R12 SP2 Policy Server.• Configured CA Wily Enterprise Monitoring tool against Apache webserver, WebLogic Server and Policy Servers.• Installed Option pack for Policy server and Web agent for configuring the Federated Security Services and User Identity between partner sites.• Experience in SAML federation using CA SiteMinder R12 Federation Security Services SAML 2.0 Affiliate Agents.• Migrated SiteMinder protected environment from Unix Solaris 10 to Linux SUSE 10.• Implemented SSO across multiple domains and created two level of authentication for additional security.• Migrated large amount of LDAP data across the environment to create a identical production environment to support load testing.• Integrated and configured web agents to protect and manage resources with SiteMinder Policy Server and assisted applications teams.•Integrated MFA with IAM policies to add an extra layer of authentication.•Integrated SailPoint API Gateway with OAuth and SAML authentication methods to enhance user authentication and authorization capabilities for third-party applications. • Performed dib clone operations to recover the LDAP data, and added servers into replication tree and created new tree into the environment.•Migrated large amount of LDAP data across the environment to create a identical production environment to support load testing.•Develop complex workflows and service adapters in the SailPoint Identity IQ configuration.•Integrated SailPoint with AWS Directory Services, enabling centralized management of AWS identities and facilitating secure access to AWS resources.• Worked on troubleshooting the issues encountered in Okta during the application integration with SAML, provisioning of users, importing of users.

Irving, Texas, United States

• Integrated many applications in Policy server by creating a new policy.• Installed and configured various web agents in accordance with the web servers involved both on Windows and Unix.• Configured few applications with Custom responses and with custom authentication schema.• Created policies, realms, rules and responses to protect the applications and configure them to work under the SSO environment.• Capacity Planning in terms of hardware and user load for policy server and web agent.• Performance tuning for web server and SiteMinder along with LDAP for better response time, low latency and high throughput.• Implemented password policies for all the applications using SiteMinder.• Configured load balancing and failover mechanisms for various SiteMinder components in different environments.