Achyut Shrestha Email & Phone Number

Charlotte, Nc, Us

• Created a one and half years long strategy to migrate from the on-premise ForgeRock platform to Azure B2C with projected cost savings of more than a million dollars over a three-year period. Delivered the first phase in 6 months and received buy-in for the next phase from CTO & CISO to modernize security frameworks of web, API and mobile applications using OAuth/OIDC.• Submitted RFIs and conducted POC with an external consultant for an API management and gateway solution. Recommended CTO terminate the contract a month into the project after on sub-par deliverables, thereby saving the company expense of 54K dollars.• Empowered direct reports to undertake calculated risks and ownership and remove inefficiencies, leading to 95% TAT on service requests and incidents. Developed a promising senior engineer into an architect role by providing multiple avenues for growth. Engaged with the offshore team’s leadership to realign 3 non-performing resources after several failed attempts to meet the team's standards and SLAs.• Streamlined product help content deployment by moving off on-premise legacy infrastructure to Azure Storage Account as part of the enterprise wide cloud native architecture initiative, increasing the content management team's productivity by 10x.• Guided customers to implement IdP federation and SSO using SAML2 protocol on multiple platforms (Okta, PingFederate, ADFS, Azure AD/Entra ID, Sailpoint, SecureAuth etc.). Converted over 100+ customers from non-SSO to SSO at the rate of four customers/month on average. Additionally, supported auto identity provisioning using SCIM protocol integration.

Kansas City, Missouri, Us

• Ripped and replaced the legacy IAM platform and processes with a cloud native identity, access & governance solution in a condensed year-long project, uplifting a decade's worth of work contributing to the savings of a million dollars annually.• Created roadmaps, prioritized goals and allocated resources in collaboration with the project manager, leadership and enterprise security team for timely delivery of milestones using Agile methodologies. Discovered and informed the finance team of $200K worth of unused licenses annually during software licensing cost breakdown and growth forecast analysis, including support and maintenance cost.• Empowered six on-site and six offshore engineers to deliver Cerner’s Security imperatives by undertaking calculated risks and ownership and removing inefficiencies. Created a development plan for an underachieving engineer and facilitated the growth with direct coaching and guidance. Established baseline expectations for performance and provided opportunities for improvements during 1 on 1 sessions.

Kansas City, Missouri, Us

• Implemented Single Sign On (SSO) using OIDC in a cloud native self-service portal for managing users’ multi-factor tokens. Automated LDAP authentication and authorization integration for 20K+ Linux servers to leverage named account login instead of shared account login.• Defined framework and deployed business rules for dictating 35K+ users’ identity Lifecycle and access management collaborating with various stakeholders, including Human Resources, Security, and Application owners. Designed low level specification details and developed interfaces and adapters for provisioning and de-provisioning user identities in connected systems and applications via several protocols such as LDAP, REST, SOAP, JDBC etc.• Designed access control workflows for managing roles/resources/entitlements, and crafted an access recertification process to achieve HI-TRUST certification. Implemented NIST security guidelines and STIG requirements to be compliant with government regulatory bodies for Cerner’s federal enclave environment. Facilitated evidence discovery for SOC and SOX controls in internal and external compliance audits.

Kansas City, Missouri, Us

• Developed a just-in-time access model for privileged accounts. Implemented trackable passwordless authentication for shared privileged accounts to backend systems using PKI infrastructure increasing Ops productivity by an order of magnitude.• Wrote a RESTful web application, Credential Vault, to store and retrieve over a million enterprise credentials. Designed a secure delivery mechanism for delivering initial credentials for users' domain accounts using the Vault.• Mentored multiple new talents during the onboarding program. Provided feedback in code review sessions, established best practices guidelines and coding conventions and facilitated design discussion for exploring solutions outside the box.

Kansas City, Missouri, Us

• Created a service to monitor backend servers’ connections and automated account deployment, reducing orchestration time by 50%.• Streamlined the check-in and check-out process of windows privileged accounts via on-demand generation of support accounts for remote support.

Kansas City, Missouri, Us

• Established a CI/CD process enabling automatic application deployment and continuous integration, reducing downtime to under 1 minute for production releases.• Scripted hardware and software asset discovery across multiple data centers reaching 99% tracking accuracy of CI inventory. Modeled dynamic mapping of the CI dependencies of various applications to improve resiliency and disaster recovery posture.

Holland, Mi, Us

• Wrote mobile app, Love Language Challenge, for IOS and Android platforms within the delivery deadline of two weeks for each platform.• Improved the codebase of the web application, Cinevee, by fixing over a dozen bugs, issuing several patches and adding 2 new features within three weeks of joining the development team.

St. Davids, Pa, Us

• Managed user identity and access in Microsoft Active Directory and maintained campus network and server infrastructure.• Tracked and audited hardware and infrastructure assets, contributing to CI inventory to support procurement decision-making alongside the IT Director.• Provided technical support to students, faculty, and staff.

Grand Rapids, Mi, Us

• Modernized legacy console programs into user-friendly, dynamic web applications increasing the productivity of development officers researching alumni endowment givings.• Met regularly with executive staff to discuss needs and requirements for applications, and presented demos.

Master Of Science (M.S.), Computer Science

Bachelor Of Science In Engineering, Electrical And Computer Engineering