Mallu Yashwanth Email & Phone Number

Alameda, California, United States

• Working on end-to-end ownership of customer issues, including initial troubleshooting, root cause analysis, and issue resolution, consistently exceeding customer expectations in response quality and timeliness.• Acting as a key point of contact both internally and externally, ensuring customer matters were resolved efficiently and effectively to enhance overall customer experience.• Gained experience in complex implementation and integration in production environments, ensuring smooth deployment and functionality.• Installed and configured OKTA’s AD Agent for seamless integration with Active Directory, enhancing identity management processes.• Supported User Lifecycle Management in Identity Management (IDM), including user account creation, updating resources, account activation/de-activation, enable/disable, and account deletion.• Configured and Implemented Single Sign-On (SSO) for 200+apps using different SSO standard protocols like SAML, WS Federation, and OpenID Connect (OIDC) protocols.• Worked on migrating SSO applications from one-login IDP to Okta IDP.• Implemented OKTA Group rules and birthright provisioning of users into downstream applications • Collaborated with application and business stakeholders to resolve roadblocks during the design and deployment of identity solutions.• Configured and managed Latest tech enabled Multi-Factor Authentication (MFA) policies and factors (e.g., Okta FastPass, YubiKey, Windows Hello etc.) which are Phishing Resistant to secure application access.• Developed New Okta Workflows as required to automate Identity and Access management.• Developed and maintained technical documentation like Lucid Charts, confluence etc.; related to the Okta platform.• Worked API based implementation and Creating Custom web pages for customer application.• Worked on Implementing device-based policies to enhance security.• Worked on Okta IGA to simplify end user experience with access management.

Sunnyvale, California, United States

• Managed the full identity lifecycle, including onboarding, provisioning, and de-provisioning, to ensure secure and efficient access control for all users.• Led the Identity Access Management (IAM) team to establish onboarding workflows, collaborating with HR systems like Workday and Sharp for smooth integration.• Acted as a subject-matter expert in Microsoft Identity Management, overseeing employee access, leaver management, and offboarding.• Developed and enforced comprehensive access control policies and standards, incorporating Multi-Factor Authentication (MFA) and Role-Based Access Control (RBAC) to maintain strict governance.• Designed and implemented RBAC models to ensure users had appropriate, role-aligned access across systems.• Administered Privileged Access Management (PAM) to secure and monitor privileged accounts and sessions, enhancing data protection.• Integrated MFA and optimized SSO to improve security and user experience, reducing friction in access management.• Designed, implemented, and maintained SSO solutions, ensuring streamlined, secure access for users.Led application integration into OKTA, working closely with application teams to define requirements and facilitate seamless onboarding.• Leveraged expertise in REST APIs to create scalable, integrated identity solutions that align with complex organizational needs.• Automated critical IAM tasks using Postman API calls to OKTA, performing bulk user and group operations.• Maintained dynamic user assignments and streamlined group management, ensuring efficient, up-to-date access across applications.• Implemented monitoring and logging to track application logs and detect potential security events.Handled L2 incidents, including user activations/deactivations, access assignments, onboarding, and certification renewals, ensuring consistent and compliant access control.

Bengaluru, Karnataka, India

● Provided architectural design and implemented enterprise-wide identity and access management (IAM) solutions for PingFederate and PingID. ● Implemented PingID MFA with PingFederate ● Enforced enterprise-wide workforce to PingID for MFA. ● Developed Ping Radius adapter and integrated with clients that use Radius (CyberArk, F5, Checkpoint VPN, etc...). ● Implemented many Oauth and OpenID connections based on the client's requirements.● Experienced in creating various adapters like Kerberos, HTML, PingID, and composite.● Created Multiple Authentication Policies using CIDR and connection set selectors in Ping Federate.● Configured multiple grant types based on the application protocols that are needed.● Based on the requirement configured Implicit, Auth code, Client credential, and ROPC grant types and troubleshooted the issues surrounding it.● Used Postman client to simulate the OAUTH flow and debugged the log files for any issues encountered.● Responsible for coordinating IAM team members, consultants, and partners during project planning, execution,● Have Knowledge in Designing the Privileged Credentials provisioning to CyberArk VaultSession Recording, Fine-grained access control, A2A feature using CyberArk PAM● Responsible for defining, recommending, monitoring, and deploying SSO (Single Sign On) Access Management Solutions on-premise using different technologies, Federated Protocols (SAML, OpenID Connect, OAuth, WS Federation) with cloud computing providers like Salesforce, AWS, Service-Now, Google, etc.

Hyderabad, Telangana, India

● Worked on supporting and debugging issues with and implementing SSO solutions with Business Partners using PING Identity solutions ● Provided architectural design and implemented enterprise-wide identity and access management (IAM) solutions for Ping Federate and PingID. ● Implemented PingID MFA with Ping Federate ● Enforced enterprise-wide workforce to PingID for MFA. ● Implemented web application OAuth Integrations with Ping.● Responsible for coordinating IAM team members, consultants, and partners during project planning, execution,● Installed, configured, and upgraded PingFederate and PingID for MFA.● Configured MFA with Citrix and CyberArk via PingID using Radius Authentication.● Integrated Ping Federate with Office 365 to enable MFA.● Integrated many applications using SAML 2.0 protocol.● Generating the certs using Comodo and updating them as per the expiry date and coordinating with the application teams to update the metadata link.● Attending the Security meetings to evaluate the newly onboarded applications to verify the authentication, authorization mechanisms used, and the protocols followed.● Develop positive relationships with internal/external business partners, seeking opportunities to increase customer satisfaction and deepen customer relationships. ● Develop unit and system test scripts, execute and validate with a high degree of accuracy and completeness, and assist the business team with the creation of User Acceptance plans and system test plans.

Master Of Information Systems

Activities and Societies: Futsal

Fellow At Nxtwave’S Ccbp 4.0 Intensive

Learning 4.0 Technologies - Full Stack development

Bachelor'S Degree, Electrical, Electronics And Communications Engineering, 6.66

10Th (Central Board Of Secondary Education)