Joe Cerasani Email & Phone Number

New York, Ny, Us

Washington, District Of Columbia, United States

Technical Architect and Team Lead for the Identity as a Service (IDaaS) project at the USPTO. I Lead a team to design and implement the infrastructure to support the Okta Identity and Access Management platform, as well as, working with individual application to integrate with the IDaaS platform using various technologies including OpenID Connect (OIDC), SAML, and the Header-Based architecture using the Okta Access Gateway (OAG).Select Accomplishments:• Architected an enterprise solution to provide Authentication and Access Control for over 100 applications and 1 million users • Integrated the solution with Layer 7s to provide security features like AntiVirus, rate limiting, and security scans• Tuned the solution to support over 10 million authorizations per hour. • Lead the design and technical refactoring of custom ReST services and other components to migrate from the Oracle IAM product to the Okta platform• Designed and implemented a robust and extensible multi-factor authentication framework using Okta APIs• Created a migration plan to seamless transition ~80 applications and users to the Okta platform.• Lead the technical design and implementation for ~100 application integration• Defined best practices for application integrations using various integration patterns, including on-prem and cloud-based applications

Washington, Dc

Lead the design and delivery of an enterprise RBAC (roles-based access control) implementation to provide authentication and authorization functionality to all USPTO systems. Lead a small team of engineers to build infrastructure components to provide the requisite functionality, as well as, integrate USPTO applications with RBAC.Select Accomplishments:• Unified a group of individual engineers into a complete delivery team• Designed and implemented a robust and extensible authentication framework fully integrated with the Oracle IAM Suite• Delivered multi-factor authentication using One-Time PIN and Timed OTP using Mobile Authenticator• Delivered a full authentication and authorization implementation to support web-based, Single Page Applications (SPAs)• Lead the design and implementation to integrate API Gateways (e.g, Layer 7s) into the Oracle IAM suite to combine the GWs security features with access control.• Lead an extensive performance tuning effort for the entire RBAC tech stack, including API-GWs and the Oracle IAM Suite. Increased RBAC’s capacity for authentications by 300% and authorization increased from 400k to 7m per hour (over 1700% increase). • Lead the technical design and implementation for 40+ application integrations• Defined and implemented integration standards and guidelines• Incorporated source code and version control for access policies• Designed a fully-automated deployment model for RBAC configurations and policies

Greater New York City Area

IDaaS Integration Architecture (Consultant) at the US Patent and Trademark Office working to design and implement a multi-factor authentication and roles-based authorization framework to integrate with USPTO applications.Technical Architect (Consultant) at the US Patent and Trademark Office with a focus on delivering Trademark Examiner Capabilities on TMNG (Trademark Next Generation).Enterprise Architect (Consultant) at AIG providing analysis on streamlining desktop and laptop procurement and provisioning.

Greater New York City Area

Led a team to build AccountTrax, a web-based Commission Management & Profit Analysis system geared towards sell-side brokers. This product is a SaaS provided by QEL.Consulted as a Technical Lead and Architect for various firms, both large and small. These include:* Merrill Lych's Fidessa development group* Volo, Inc. a startup transportation network company* Tugboat, Inc. a startup classified advertisement company* KBTF; expert witness for a law firm specializing in intellectual property* US Patent and Trademark Office* Inshur, Inc

Alexandria, Va

Technical Architect for the next generation Trademark web application (Trademark's Next Generation). Led a team of 20+ Developers, 3 Business Analysts, 8 Testers, and a substantial number of supporting personnel. TMNG is a Web Application project at the USPTO to replace 30+ legacy systems that support the USPTO's analysis of new Trademark Applications; including International Trademarks.

Led a team of 15 developers, analysts, and testers to implement the Fidessa Order Management System for Merrill's sales trading business.

Led the design and development efforts for first iteration(s) of CAMA (CAnadian Multimarket Access). Helped to bring CAMA to market for Fidessa's first Canadian client; a market they now dominate. Led the design and development efforts for the initial implementation of DANA (Data Access North America), Fidessa's market data platform.Technical lead driving a small group of developers on the CGW and FGW Products.