Working on GCE Fleet Deployment Platform for reliable, efficient and speedy rollout of GCP’s Host and VM infrastructure components.

Cloud security architect for Operating Systems Security group.Working on technologies like virtualization secure mode(VSM) isolation, runtime attestation, PKI, bitlocker

Tech lead and architect for Azure Host Attestation Service working with teams across different geo locations.Securing millions of nodes in Azure fleet using attestation and enforcement of security claims provided by hardware and operating system.Azure security architect and developer for Compute+Security Org project for auto-detection and remediation of insecure nodes.PKI and Attestation architect and primary platform integrity developer for Identity+Security Org projects for protection of AAD and MSA token signing keys.Led key shielding initiatives in trusted execution environments for Azure foundational services.Formulated and patented novel TPM failure resilient attestation protocols.Architected per-node level security posture detection for heterogeneous hardware/software environment of Azure by moving the service from being stateless to stateful using MongoDB.Architected newer PKI and attestation design for next Azure host OS architecture.Designed updated PKI enrollment mechanisms for newer container based architecture

Privacy, authorization service for data infra org

Tech lead for the secrets(certificates, storage keys, SAS keys) management and distribution cloud service which is one of the foundational services of Azure. Architected the design and lead the implementation of the safe rollout of secrets to azure services. Identifying and implementing crucial scale & cache improvements.Designed, Implemented and Patented Universal PKI distribution pipeline.Architected and implemented Azure Boost secrets infrastructure:- client and server.Intuitive authorization models for secrets distribution for workloads using secrets management service .Designed and led implementation of custom container roll out orchestrator for the control plane of Azure managed HSM offering

I have worked for Windows Core Security division. Namely I have worked with PKI technologies, Authentication Platform technologies like logon infrastructure for Cloud accounts like MicrosoftAccount and Azure Active Directory, Single Sign On, authentication protocols like NTLM, Kerberos, Credential management technologies, distributed server farm identity management, Server technologies like the certification authority and active directory. Designed and led implementation of unified sign in architecture for cloud accounts like AAD and MSA on windows 10 using modern windows hello protocols.Augmented AAD + AD sign in client side security support provider(SSP) for SSOImplemented RDP protocols for AAD and MSA.Proposed and implemented patented automatic sign on of users after an update.Implemented distributed group managed service account client infrastructure.Primary owner for windows credential vault and credential manager.Implemented plugin for secure roaming of credenrials through the cloud. Adapted Exchange Active Sync (EAS) from mobile to windows multiuser modelDesigned and implemented accounts control UX for windows 8.1Owner of windows server certificate services and OCSP service.Developed HTTPS certificate enrollment protocols and services.Improved database query processing Performance for certificates services JetDB to improve large query processing from 10’s of minutes to just a few seconds!Delivered working prototypes of CA database backend on SQL.Prototyped federated PKI enrollment across orgs.Implemented in memory database issuance of certificates to meet high scale needs of certain customers.Maintained and implemented features for MMC management UX for various server services in PKI.- CA server management UX- OCSP server management :- designed and implemented this UX from scratch -Certificate template management -Enterprise PKI management UXGaming division:-- online Catalog service- REST to WCF conversion libraries