Mark Mabe Email & Phone Number

Newark, New Jersey, Us

- Enterprise security architect, developing secure solutions for IAM - CIAM and WIAM, Cloud, DevOps, APIs, and Web Applications. - Design and secure AWS and Microsoft Azure cloud Infrastructure as a service (IaaS), Platform as a service (PaaS), and Software as a service (SaaS), VPC, ingress and egress, secrets, and crypto/ key management, etc.- Build POCs, patterns, and frameworks to solve enterprise-wide technical problems, with code including Python, Java, Infrastructure as Code/IaC, Terraform, etc.- Provide guidance for secure coding, web application security, authentication, authorization, identity, and access management

Redmond, Washington, Us

- Part of Microsoft's Financial Services Industry in Customer Success (FSI CSU), helping to accelerate our Banking customers with application modernization and Azure cloud adoption. - Design cloud native architecture, event driven designs, write scripts/code, Terraform infrastructure as code (IaC), and workshops for customer proof of concepts and demos.- Lead deep technical architecture discussions with customers, including, Enterprise Architects, IT Management and Developers. Conduct architecture design sessions (ADS), Well-Architected Framework (WAF), Enterprise Scale Landing Zone, Cloud Adoption Framework (CAF).

Boston, Ma, Us

- Part of the Akoya project which was spun off as a independent company and is owned by Fidelity, The Clearing House Payments Co. and 11 of its member banks - https://akoya.com/about- Managed cloud architecture, security, infrastructure, governance, and CI/CD pipelines for Akoya's API based financial data access network. This included AWS, Kubernetes/EKS, Azure AD, Microsoft 365, Zscaler, VPN, Terraform infrastructure as code, Python and PowerShell scripts and automation.

Boston, Ma, Us

- Part of Enterprise Cloud Computing (ECC). Served as a team leader on a group responsible for the enterprise-wide rollout of Fidelity's Azure cloud environment. This consisted of core architecture components such as governance, security, guardrails, automation, and CI/CD, which ensured we complied with SOC 1/2 and other data compliance requirements.- Architected and developed an event driven application in Azure that automated the onboarding and provisioning for business applications to Azure landing zones. Developed in .NET, Python, PowerShell,- Designed and programmed enterprise authentication/IAM standards and patterns for AWS Secure Token Services (STS) in Python, Go, NodeJS, Java, PowerShell, and C# .NET. This enabled developers and applications to authenticate securely with short lived federated credentials.- Architected and developed enterprise Single Sign-On (SSO) reference applications for AWS Serverless, establishing patterns for to enable secure authentication with OpenID Connect (OIDC) to internal IAM systems.

Boston, Ma, Us

- Part of Enterprise Cybersecurity (ECS) - Enterprise Identity and Access Management (EIAM) team, responsible for IAM authentication/authorization (AuthN/AuthZ) systems, Web Services Authentication/B2B, and Multi-Factor Authentication for over 430 applications, 70,000 employees, serving over 1 million web requests daily.- Architected and engineered PingFederate DMZ capabilities that allowed employees on the public Internet to access SSO protected vendor applications and websites, using secure standards like SAML and OpenID Connect (OIDC).- Architected and developed a self-service UI (HTML, jQuery) and REST API (Python, Axway) to automate onboarding to Ping Identity, which included automation of Active Directory account creation and encrypted password delivery using PowerShell and CI/CD pipelines (Jenkins).- Developed CI/CD pipelines to securely automate processes and tasks (Jenkins, PowerShell, Bash)- Developed password credential validator (Java) for Ping Identity, allowing decommission of legacy authentication systems that potentially saved the company ~$150K/year- Architected and implemented security token service (ADFS) to provide Single Sign-On (SSO) capabilities for applications and users authenticating to Microsoft Office 365, Azure, and other claims-aware systems used by Fidelity employees.- Developed a C# Windows GUI end-user application to support the enterpise migration from IBM Sametime, which automated the transfer of an employee's chat contacts and was used by approximately 22,000, potentially saving 1,460 hours of time across the firm. employees- Wrote .NET and PowerShell scripts to automate, audit, and remediate Active Directory health checks, LDAP user objects, groups, and computers to ensure enterprise compliance and security.- Administered four identity automation instances (Microsoft Identity Manager) maintaining synchronization between multiple identity stores and environments.

Arlington, Virginia, Us

Arlington, Virginia, Us

Arlington, Virginia, Us

Arlington, Virginia, Us

Arlington, Virginia, Us

M.S. Computer Science

B.S. Computer Networks And Cybersecurity