● Worked on implementing SSO solutions using PING Identity solutions with federated Protocols (SAML, OpenID Connect, OAuth, WS Federation). ● Provided Architectural design and implemented enterprise-wide Identity and Access Management (IAM) solutions using Ping Federate and PingID, Ping Access, PingOne, and Ping Directory. ● Implemented PingID MFA with Ping Federate and integrated Apigee with PingOne Authorize.● Created flows using PingOne Davinci for authentication by connectors and used PingOne for SSO configuration.● Strong experience in updating certificates client certificates, and keys.● Experience in working with cloud security for GCP, AWS for applications migration, cloud security assessments of lifecycles, and designing the cloud security policies as per SIEM, DLP.● Experience in DEVOPS principles of CI/CD with cloud infrastructure such as Azure, AWS, GCP, and Kubernetes and cloud security and virtualization.● Expertise in configuring PingID and enabling multifactor authentication using PingID adapter.● Experience in creating custom authentication policies as per client requirements.● OGNL expressions to transform attributes in the SAML assertion as per the requirement

● Managing and maintaining Entra ID ( Azure AD), and Active Directory (AD) infrastructure, including domains, users, and groups, authentication, health checks, and Group policies (GPO).● Creating and managing security groups, distribution groups, and organizational units within AD.● Utilizing AD Connect (Ad Sync), (CA) Conditional Access policies, PIM Privileged Identity Management, and MFA of Azure AD to enhance the security posture of applications and users.● Implementing SSO using SAML, OAuth, OIDC, Provisioning and de-provisioning user access to AD resources and web applications, including granting and revoking permissions.● Configured Azure AD connect as part of Directory sync between on-premises and Cloud infrastructure.● Managed Active Directory ( AD) 2012R2,2016, ADFS, DC ( Domain controllers), Active, Azure, and PKI with the application team.● Worked on Windows server 2016 ADDS forest preparation for schema upgrade.● Implemented Azure PIM privilege identity management and other app privileges using Ansible, Chef, Puppet, and DevOps tools.

● Expertise in configuring OAuth authorization servers in OKTA to be used by OAuth clients.● Experience with OKTA SSO, MFA, Universal Directory, and lifecycle management.● Experience in Okta Identity Life cycle, Creating OKTA workflows and managing OKTA workflow, Workflow automation, and application integration platform.● Experience in creating custom scopes and claims in OKTA for applications to authorized users.● Configured single-page applications for implicit grant type to get OpenID token.● Experience in implementing OKTA's appropriate accesses to applications, and systems with also inbuilt multifactor authentication for added security.● Experience in installing Okta’s Lightweight agent to integrate with Active Directory and Google Workspace directory.