Riyaz Shaikh Email & Phone Number

Tampa, Fl

• Developed EDIManager manager applications using .net Core, Microservices, Asp .Net, Angular, MVC,• Containerized with Docker, Kubernetes, WSL, Compose and Tilt.• Used Terraform to create/update application registration and set permission.• Configure Azure DevOps CI/CD pipelines.• Security Design review Boomi Integration and Oracle Cloud ERP projects. • Write security stories for Boomi Integration project and Oracle ERP projects.• Drafted Enterprise level Data Governance Policies.• Drafted Access review policy for Boomi and Oracle Cloud ERP.• Review and apply Oracle cloud security and Roles and Responsibility. • Implemented SSO, conditional access for Boomi Integration and Oracle ERP.• Responsible for JIT and JEA access for applications.• Done extensive research on EDI File Sandboxing tools. • Threat model existing and new backend applications using MS threat modelling tool. • Analyze threat and create risk register and risk ratings.• Create/Modify Azure pipeline for automated code scanning with Checkmarx.• Use power shell scripts to Auto rotate application secrets.• Responsible for granting admin consent for the application access request.• Define routine periodic review process.• Create POC for DataDog integration for logged collection.• Migrated old applications from old 2012R2 windows server to new windows server.• Performed Webserver hardening task that include removing unused application, disabled old encryption suites, and check and review access to the resource. • Handle technical support security tickets created for application security issues. • Create plan for penetration testing for APIs developed for Oracle ERP integration.

• Design, Develop and update subsystems for Third Party Liability, Financial and Provider subsystems of the application asp .Net, C#, ORM and RDBMS technologies.• Fixed web/user controls issues to the application.• Developed the WCF/Micro services and defined Service Contracts for specific functionality.• Used Web API for HTTP and REST based GET, POST, PUT, DELETE and Returning JSON object.• Fixed defects on UNIX based batch jobs written in Pro C.• Designed WinForms using C# and WPF using Visual Studio 2015 with Telerik library.• Building Views using HTML5, Angular JS, CSS3, jQuery and JavaScript. • Implementing Web API Controller action methods for invoking server-side actions.• Implemented Server Side and Client-Side Validation modules using Validation Controls and JavaScript.• Used LDAP for Active Directory Password resets, Created and modified Exchange mailbox distribution lists• Leading organization effort to migrate entire solution to the AWS cloud. • Created and managed network user groups.• Actively participating in enterprise application security meeting and discussions. • Monitors OWASP top 10 vulnerabilities scanning and applied remedies for asp .net and C# components of the application. • Use Fortify for code Vulnerability checks and fix them.• Use Coverity for code analysis process. • Simulated DDoS attack for most of the servers using various scripting tools like Jmeter, Blazemeter and Badboy.• Customized Google’s reCAPTCHA to prevent bot attacks.• Extensive use of OOPS principals and design patterns.• Support and train other team members across the team.• Perform code and design review across the team.

Columbia, South Carolina, United States

• Member of architect team during initial application design and framework development.• Actively participated in application framework design and development.• Responsible for design and development for Establishment, Enforcement and System Administration modules of the application.• Scratch analysis model, collaboration model, detail domain models and physical data models of the application.• Leading developer team of establishment, enforcement, and system administration modules of the application. • Proactively participated in business analysis discussion of the application’s cross functions.• Implemented Agile Methodologies such as Scrum, and Test-Driven Development (TDD)• Actively involved in daily troubleshooting in development and functional discussion.• Managing Release and deployment through NAnt script for the application.

Salem, Oregon, United States

• Explored SOA in depth.• Creating External Web Service in C# for end users.• Creating Internal Web Service in C# to implement business rules. • Design and developed Orchestrations in BizTalk 2006 to process XML message coming through MSMQ via internal Web Service.• Message pattern like document message, Request-Reply Message and command message.• Lead the developer team for service development team.• Responsible for writing and using stored procedures (SQL Server 2005).• Responsible for bug fixing.• Control Release and deployment process on production environment.

Master Of Science, Information Security And Assurance

MS degree is aligned with security standards put in place by the National Security Agency (NSA) and encompasses the 10 security domains.

Bachelor'S Degree, Business/Commerce, General