Building an adaptive and autonomous security solution that supports the pace of business while maintaining security and customer trust.

Expanding my portfolio to the overall JIT service for all salesforces public cloud infrastructure as well as first party infrastructure.

• Led a team that developed and managed the Identity and Access Management (IAM) service for the Salesforce Hyperforce environment on AWS. Provided JIT access for ~20k AWS accounts. • Led multiple complex engineering effort that hardens the JIT credentials. Eg. leverage AWS SCP and hyperforce network artifact to limit the use of JIT creds to production networks only. • Delivered on multiple company level effort to enable hyperforce on AliCloud and AWS Govcloud. • Consolidate the IAM management of all AWS account to a central place (complex inventory and technical problem). This effort allowed us to easily deploy Wiz to all AWS accounts. • Drove multiple cross-functional effort such as detect and remediate orphaned AWS account. Worked with AWS to leverage features specifically built for us to prevent new orphan AWS from being created (via domain validation). • Help stood up a sister team in India and helped ramp them up and define charter for them. • Relevant AWS technology include: AWS Organizations, CloudFormation, StackSets, IAM, Step Functions, Lambda, SQS, SNS, API Gateway, Dynamo, S3, ECS, EKS, CodeCommit, CodePipeline, KMS • Other Technologies used: Go, Terraform, Vault, Kubernetes, Helm, Spinnaker

• Original member of a fast growing team within Salesforce that focused on building in-house security services. Worked on multiple IAM services including Kerberos, Directory, MFA, and Production Remote Access. • Tech lead for a Just-In-Time credential generation service for access to AWS cloud resources for all HyperForce salesforce developers. • Designed and implemented a generic framework for injecting sidecars to K8S which is widely adapted within salesforce and has been open sourced and presented at kubecon. • Help salesforce migration to HyperForce by designing and implementing a Kerberos Keytab distribution service for Salesforce K8S workloads - used by HBase team. • Designed and implemented a patented solution to synthetically generate Yubikey one-time-passwords to allow automation access to hosts in a secure fashion. (United States Patent Application 20200244659)

Working on distributed system security, identity access and management area.

• Windows Core team, specifically on isolation platform technology. • Designed and developed features in WebAccountManager which is an OS component that allows universal applications to connect to different external identity providers in a converged manner. It became one of the heaviest trafficked component with 30+ billion access token requests per month across all Windows devices. We encountered and solved many problems involving identity and access management, performance and reliability. This eventually led to Windows 10 becoming a Password-less OS, as well as new technology such as BrowserSSO (patented). • Defined and developed features in User Model for Windows Core OS which is a truly universal, cross-platform OS. By providing a flexible user model, we enable the shell to tailor an experience based on device type and usage scenario without having to make platform changes. Provided guidance to teams adapting to user model on the new Windows Core SKU. • Maintain and develop features in UserManager service. The service provides functionalities that allows users to logon to the system, as well as manages user separation.Developed and maintained features in Security Model, which includes capabilities definition, capability authorization, and phone capability policy enforcement, capability API set, transient object API set.

Worked on a secure web browsing Android application that filters the URLs bring browsed.* Worked on an automation framework named Rubidium in Ruby and java.* Created a Java library for simulation of UI interaction an Android device.* Prototyped a Content Locker application for Android which allows secured file browsing in app.* Worked on a project for build infrastructure optimization and stabilization. Shortened buildtime by 50%.* Integrated Continuous Integration into build system and achieved 100% coverage whichincreased nightly build success rate by 40%.