James Holden Email and Phone Number

Full-time Okta Engineer at American Water. I manage all Okta integrations and administration for all external customers and internal users. I have collaborated with business and technical teams to integrate Okta SSO in over 150 business and custom applications (SAML and OIDC). I enhanced users’ experience by reducing friction authenticating multiple factors.• Deployed an Okta based user management system for MyWater the American Water customer portal (login.amwater.com). It authenticates (authN) users and authorizes (authZ) privileges for 500,000 – 600,000 users per month (over 3 million total). It utilizes OAuth and OpenID Connect (OIDC). I worked hands on with developers to build token-based authentication for proxied API in this app (and all new company applications). • Deployed “Passwordless” multi-factor authentication to all managed devices (Windows, Mac, IOS, Android) through an integration with WorkspaceONE.• SCIM user provisioning with AWS, DocuSign, and other applications.• Detected botnet DDoS attacks through user authentication patterns.

I led development of two Cybersecurity applications. Managed a team of 13 (10 offshore and 3 east coast U.S.). The team grew from 3 members over the course of 2 years as we needed more compacity to deliver features. The team was dynamically assigned to either application depending on business requirements. This prevented over-capacity on any one program. We were very internally supportive; only 2 people left the team during the life of the programs.• CoreSec - Security1View: SCADA Network intrusion detection and analysisThis was an alerting system for SCADA. Using firewall logs, we measured the traffic over sensitive ports. The results were plotted on individual charts measuring average packet size and number of packets that passed the monitored ports.• CantheSpam - Security1View: Phishing simulation analytics and competitive training.Compiled data from internal monthly phishing tests and analyzed results by user demographics pulled from AD and presented in user requested graphics. Results were gamified through competition in a map of geographic sections of the company and their collective click-through percentage on the simulated phish.• Twistlock Administration - SecDevOps cloud native cybersecurity platform for CI/CD in an Infrastructure as Code (GitHub) hybrid AWS cloud and on-prem data center environment

I led development of two Cybersecurity applications.• Security1View – CantheSpam and CoreSec• Twistlock Administration - SecDevOps cloud native cybersecurity platform

• Public Key Infrastructure - Microsoft PKI integrated with Cisco ISE, Cisco ASA, and Intune Mobile Device Management platform• Cisco Identity Services Engine - Authenticated and authorized users for VPN, internal wireless internet access, Intune MDM• Vulnerability Assessment and Management – Founder of the Vulnerability Response Program (VRP). Tracked vulnerabilities to remediation.• Cisco ASA and Fortigate - Firewall Configuration• Cisco Firepower Intrusion Detection, Stealthwatch Netflow Analysis, and Forensic Investigations

• Public Key Infrastructure - Microsoft PKI integrated with Cisco ISE, Cisco ASA, and Intune Mobile Device Management platform• Cisco Identity Services Engine - Authenticated and authorized users for VPN, internal wireless internet access, Intune MDM• Vulnerability Assessment and Management – Founder of the Vulnerability Response Program (VRP). Tracked vulnerabilities to remediation.• Cisco ASA and Fortigate - Firewall Configuration• Cisco Firepower Intrusion Detection, Stealthwatch Netflow Analysis, and Forensic Investigations

Technical Support, Troubleshooting, and Customer service.