Sunil Kamboj, Cissp Email & Phone Number

Cumming, Ga, Us

Seoul, Seoul, Kr

Seoul, Seoul, Kr

Alpharetta, Georgia, Us

Oversee all Access Management professional services projects at Simeio.Lead architect for a couple of projects.

Alpharetta, Georgia, Us

Technology lead of the program from Simeio for North Carolina’s Citizen Identity Project. The project involves moving North Carolina’s 1.5 million residents & businesses’ identities and 100+ applications from the Department of IT’s on-premises infrastructure to modern cloud-based services.• Responsible for the following product portfolio: Ping Federate, Ping Directory, Ping Data Sync, Ping One MFA, and Simeio Identity Orchestrator deployed on AWS Kubernetes Service Clusters using DevOps.• Supervise a team of on-site and offshore engineers, Business Analysts (BA), and Quality Assurance Analysts (QA).• Lead the business requirements gathering and design discussions.• Designed the overall architecture to meet all business needs and created necessary architecture diagrams and documents for the solution implementation.• Guide engineers to POC unique use cases and supervise the implementation.• Oversaw the creation of the Business Requirement Document, QA test scripts, training material, and UAT.• Conducted town halls for various State agencies for awareness and adoption of the new solution with ease.

Alpharetta, Georgia, Us

IAM Delivery Lead from Simeio for SPE’s managed services team. As the in-house IAM expert for SPE, I was responsible for managing the operations and enhancements of the IAM technology stack and advising the client on the technologies to adopt and decide on the roadmap. • Responsible for the following products portfolio: CA SiteMinder, ForgeRock, RSA Authentication Manager, Radiant Logic VDS, Azure AD, and SailPoint IIQ.• Supervised onsite and offshore teams of architects & engineers to design, implement, maintain, support, and upgrade the IAM platforms.• Review and POC the products and solutions to provide feedback to the client to decide the roadmap based on business needs and evolving security challenges.• Handled major projects like Data Center migration and adoption of the cloud.• Continually improved the security posture and user ease, e.g., introduced role-based step-up MFA and passwordless authentication using Kerberos with SiteMinder.

Alpharetta, Georgia, Us

Work with client Vice President & directors to take requirements, design and architect Identity & Access Management (IAM) implementation of CA SiteMinder, SAML 2.0, Directory servers, RSA Authentication Manager with other technologies. Integrate new applications with SiteMinder, Directory servers & RSA, provide enhancements, solutions and production support.• Manage SiteMinder r12.x, CA Directory r12.x, Secure Proxy Servers/SAML servers r12.x & RSA 8.x authentication manager appliances across multiple environments used by hundreds of applications.• Upgraded the SiteMinder, CA Directory, SPS SAML servers & RSA appliances to latest releases.• Continue to develop Solutions and do Proof of Concept for different business needs.• Integrated SiteMinder with RSA for 2FA authentication.• Implemented various authentication schemes (Cert based, Form based, MFA, SecurID).• Developed Step up authentication for privileged users (Privileged Access Management) for SiteMinder integrated SAML applications.• Integrated Office 365 with CA SiteMinder servers.• Integrated tens of new in house and cloud applications with SiteMinder using agents & SAML.• Integrated tens of applications with RSA AM appliances.• Deployed & managed RSA AM Prime (portals) & WebTier (soft token distribution) components. Set up various token policies and reports.• Integrated ADFS, Cisco VPN and SAP systems etc. with RSA.• Manage Radiant Logic Virtual Directory Servers 7.2.x.• Create new views and issue services accounts to integrate new applications with VDS.• Manage Forge Rock OpenDJ 3.5.x servers.• Update schema of OpenDJ to include new attributes to provide role-based access for applications. Issue service accounts to integrate new applications with OpenDJ.• Provide solution to various vulnerabilities reported by different scanning tools.• Renew and apply yearly SAML certificates and various other certificates to SPS, SiteMinder, VDS & OpenDJ servers.• Manage and guide offshore team.

Mumbai, Maharashtra, In

Serve as tower lead of a team of over 20 L2-L3 professionals that supports PwC’s IDM & Middleware infrastructure and also as PMAT resource to provide expertise in project & non-project related activities. Involves working with various client leaders to gather customer requirements in identity space, and deliver solutions with the help of onshore & offshore resources.• Manage the global Enterprise Directory (LDAP) service for PwC. An Oracle Directory Server Enterprise Edition (ODSEE) 11G & 6.3 Directory (formerly Sun) multi master environment spanning multiple countries and data centers, utilized by thousands of applications on a daily basis.• Migration to ODSEE 11G version from 6.3.• Subject matter expert on all aspects of the Oracle Directory product including schema design and management, Replication design, ACI management and performance monitoring and tuning.• Manage CA Siteminder 6.x & 12.x infrastructure which serves as the authentication & Single Sign On solution for PwC applications.• Migration of applications from Siteminder 6.x to 12.x.• Integration of web applications running on Apache, Microsoft IIS, Weblogic and Websphere with Siteminder (6.x & 12.x) to provide single sign on across the PwC’s application suite.• Implemented single sign on with multiple PwC vendors using Federated Security Services and SAML 2.0. • Manage Microsoft Forefront Identity Manager (FIM) servers which provision user identity in the PwC Enterprise Directory & various heterogeneous platforms like IBM Domino servers, Microsoft SQL Databases, Oracle DB, Microsoft Active Directory etc.• Identify and remediate security threats to the environment, coordinating with the IT Security organization.• Apply patches, updates, and fixes as suggested by external vendors and as required by the business.• Written scripts using Shell & Perl to automate health checks and additional log monitoring requests during issues.

Noida, Uttar Pradesh, In

• Manage the global Corporate Directory service for Goldman Sachs. Sunone Directory servers 5.2 with master-consumer topology, spanning multiple countries and data centers utilized by hundreds of applications by Goldman Sachs.• Manage Access Control Lists (ACLs) for different level roles and privileges to directory data.• Investigate various logs like access/error/audit logs for server health/access issues of clients or any issues related to record updates/data integrity.• Create replication agreements & monitor replication, sync status.• Using command line utilities like ldapsearch, modify, delete for manual updates or to run reports for various managers in organization.• Using command line utilities like ldif2db, db2ldif, db2bak etc for importing and exporting entire suffixes, backup of server.• Adjusting cache sizes, indexing for performance tuning.• Develop/update/deploy SQL Data Transformation Services (DTS), and SQL Server Integration Services (SSIS) packages to extract data from different sources, transform and upload to DB.• Perl scripts were used to sync data from the DB to Corporate Directory.• User provisioning through Management Agents (MAs) from Microsoft Identity Integration (MIIS) servers• Integrate applications with MIIS for automated identity provisioning by designing new MAs.• Plan & participate in BCP/DR activities.• Manage the DNS/DHCP servers through Alcatel Lucent Vital QIP product.• Manage various critical jobs through Autosys job scheduler.

Bachelor Of Engineering (B.E.), Electronics & Communication Engineering

Polytechnic Diploma, Information Technology