Raj Thomas Email & Phone Number

San Francisco, California, Us

A global retailer with ~117,000 employees and $13.8B in annual revenue.Position Highlights: • 2,500+ store infrastructures, E-commerce websites, and customer call centers secured by building a high-performing team of world-class security talent to address the company's information security needs. • 50% reduction in costs and compliance efforts earned through automation; partner and align cross-functional teams to reinforce product security to drive secure development practices while maintaining business. Lead the security architecture, penetration testing, DevSecOps, and selling channel security teams of 25+ associates and contractors responsible for implementing controls and mitigating risks related to GDPR, PCI, PII, and other information security and data privacy standards. Collaborate with teams across GapTech to secure internally developed and vendor products and follow the security standards to protect infrastructure, network, customer, and workforce data.

San Francisco, California, Us

San Francisco, California, Us

As the lead of Product Security, I partner with business teams at Gap, Old Navy, Banana Republic and Athleta to define and implement security controls and tools across E-Commerce, Enterprise, Stores and Distribution center platforms. Part of technical steering committee in the technology vertical to provide InfoSec recommendations for Customer and Employee facing Products. As a hands on architect, my responsibilities also include performing security & architecture reviews, developing security standards, policies and secure architecture patterns, pen-testing of in-house & vendor products, code scanning, enforcing standards and guidelines, recommending/validating fixes, security training and awareness, and assisting in legal & compliance efforts. Partner with Vendors for third party risk assessment, secure data transfer and data retention. Partner with Security Strategy & Governance to build and maintain a security controls framework that is current and applies across all technology environments. Mentor other teammates and architects globally to help them develop secure applications and bolster security skillset within the organization.Selected Contributions:* Implemented bot protection to detect and block sophisticated human-like bots, reducing 90% of bots to login pages, in-turn increasing overall site experience and reducing consumption cost of downstream systems.* Designed and Implemented Security policies in Azure and OCI to detect vulnerabilities in Infrastructure, Application and Network layer.* Implemented Adware blocking technology and blocked 100% of ads injected on our website which boosted e-commerce conversion rate. * Developed architecture designs, Security Standards and policies for Azure and OCI workloads as the organization migrates from on-premise to Multi Hybrid cloud.

San Francisco, California, Us

As a Product Security Architect, I work closely with architecture peers across all GapTech to ensure that all of our customer developed platforms and technologies are architected such that all Gap Customer and Employee Data analyzed, captured, processed, and/or stored is secured. Sit on the Enterprise Architecture Committee to represent Information Security principles and requirements across platforms and products built by GapTech. Design and Implement Industry standards Security protocols for internally developed applications, cloud services – IaaS and PaaSSelected Projects & Contributions: * Implemented advanced user behavior telemetry application to identify bots’ vs human traffic in our Brand Websites to get cleaner data for business teams and increase our Websites’ Security Posture.* Implemented Script Manager to gain visibility on 3rd party tags in our Websites.

San Francisco, California, Us

I lead the Access Management platform both on-premises and cloud Solutions. Make continuous improvement to align with future state architecture. Providing technical solutions to the developers on authenticating their applications securely with the user’s directory. Implement Cybersecurity’s best practices to protect Gap’s resources.Selected Projects & Contributions:* Write Security rules in Akamai for Gap brands Ecommerce needs and to protect Gap’s customer from bad actors.* Pushed the Micro-services architecture with Apigee to enable API producers and API consumer protect their APIs using OAuth tokens based on scope and sensitivity of the APIs.* Built a new Ping infrastructure along with DR site in RCC to support Gap stores users to authenticate and cater our customers.* Designed and implemented OIDC for our Brand Websites in UK using Salesforce Demand ware platform. * Implemented modern authentication protocol OIDC for our mobile app with PKCE security feature included which made us to retire legacy authentication mechanism.* Architecture and integration of our Federated authentication system with a Gateway API management system.* Designed and Built a new Federation platform from scratch and integrated it with API gateway, which will use access tokens provided by federation system.* Upgraded, scaled and modernized the federation system’s architecture to support increased load.

Bentonville, Arkansas, Us

Handle onboarding and off-boarding of 3rd party applications into Wal-Mart environment using PingFederate, a federated identify and web services security solution. Protect resources using WAM agent based solution. Create adapters, policies, PCVs and data stores to keep the PingFederate environment robust and meeting business requirements. Establish new IDP/SP federations for corporate partners; install integration kits in servers and create alerting system when Ping servers are down. Analyze server logs to identify issues, assess root causes, and determine permanent solution. Review, approve, and implement change requests. Oversee identity and access management for Windows, Mainframe, and UNIX platforms. Provide RSA Token Administration in PCI/non-PCI domain and delegation of roles to users. Coach and mentor colleagues on technical specifications and troubleshooting. Administer PKI SSL digital certificates and provision password-less authentication using SSH.Selected Projects & Contributions:Acted as technical point of contact throughout migration of 70 federated applications from RSA FIM to Ping Federate.Created a shell script to upgrade PingFederate in a high-availability clustered environment.Implemented SaaS connectors for provisioning and de-provisioning to clear out zombie accounts for Slack SaaS provider.Implemented SCIM protocol using PingFederate to Sync accounts from Wal-Mart’s AD to other SaaS providers.