• One of the Primary Designers of Oracle’s Identity Cloud Services Architectureo Multi-Tenanto Event-Driven, Stateless mid-tier micro serviceso Scales to hundreds of millions of users and hundreds of thousands of tenants per data centero Co-designed Identity ER diagramo Designed Admin, Audit, Notification, Jobs and Reporting micro serviceso Co-Designed Inbound / Outbound Sync Framework from / to On-Prem and Cloud Targets• Designed SCIM 2.0 compliant REST API & Persistence framework (100% JSON meta data driven)• Designed Meta Data Driven Report Framework• Designed JSON and CSV Import / Export Job for data migration between IDCS instances or other targets• Improved scale and resiliency of IDCS micro services and data store• Researching how to move per tenant audit data out of tenant operational data store into separate data store (NoSQL or ES)• Designed TargetAction / TargetActionResult framework with HA and LB leveraging JAX-RS asyncResponse for IDCS-to-on-prem-bridge outbound and inbound sync to and from on-prem targets such as AD and OUD/OID• Designed moving EmailTemplates out of tenant store and into global store with support for per tenant on-demand persistence of EmailTemplates in tenant store only as needed• Designed HA, load balancing and fail over for AD and on-prem bridges• Designed Feature Flagging for all IDCS features• Designed event driven, eventually consistent, readOnly UserGroups store used by authn queries to get a user’s static and dynamic group memberships at run time• Designed new thread pool per job in job service and other enhancements such as throttling max concurrent jobs per tenant• Designed Identity featureso Group based delegated administrationo Dynamic rule driven group membershipo End user permission admin• Designed generic attribute and context based Policy Engine to support sign on and identity policy client needs

• Chief Architect for Sun Identity Manager product• Worked closely with product managers and developers to transform customer and market requirements into detailed product roadmaps and user stories; ultimately resulting in integrated product functionality• Led and designed architectural and functional enhancements to Identity Manager specifically in the areas of authentication, authorization, auditing, password management, user management, delegated administration, role life cycle management and manual provisioning• Technical lead on M&A team for multiple technology mergers and acquisitions including product analysis, technical due diligence, build vs buy analysis and recommendations to marketing and management• Ensured coordinated designs for key points of integration by working with other Sun Identity products including Access Manager and Directory Server• Designed and integrated Role Based Access Control (RBAC) into Identity Manager using the concepts of required, conditional and optional contained roles

• Co-designer of Waveset identity management web application server architecture• Primary designer and developer of authentication, authorization, auditing, password management, user management, user form transformations, and delegated administration server components and related JSP pages and Java bean driven user and administrative interfaces• Directly involved in customer facing engagements collecting requirements, proof of concepts, early customer deployments, and pre-sales.• Trained pre-sales on security aspects of the product and helped develop POC demos• Designed, developed, and integrated meta data driven resource object management across heterogeneous directory resource types within Identity Management product suite

• Chief technical engineer for Tivoli User Manager and Security Manager products• Responsible for all design and integration issues with current and future Tivoli systems management products, leveraging framework services including software distribution, event management, and auditing• Frequently involved in pre-sales and customer facing presentations of Tivoli security product features and roadmaps• Initiated and implemented RBAC support in Tivoli Security Manager• Spoke at several customer and industry conferences on RBAC and how it could be practically implemented with the Trilogy solution

• Managed team of engineers responsible for product technical support• IBM Representative on Distributed Computing Environment (DCE) cross-industry team• Lead definition, design, and implementation of DCE security, registry, and auditing services• Responsible for porting and enhancements to Microsoft’s LAN Manager product• Co-designed, developed and managed handoff off to IBM Japan the IBM 3270 Gateway for use with the PC 3270 Client• Researched, reported, and resolved scale and performance issues with the PC 3270 Client

• Managed a group of nine software engineers in specification, design, and development of CAD software for layout and manufacturing of printed circuit boards, including surface mount• Projects included an automatic three-dimensional router and interactive graphic editor

• Specified, designed, developed and coordinated the implementation of design automation tools for use in the design of VLSI and WSI systems• Participated in the definition and publication of the company’s software programming standards and methodologies manual