Robert Wang Email & Phone Number

Bellevue, WA, US

Bellevue, Washington, United States

Building an adaptive and autonomous security solution that supports the pace of business while maintaining security and customer trust.

Bellevue, Washington, United States

Expanding my portfolio to the overall JIT service for all salesforces public cloud infrastructure as well as first party infrastructure.

Bellevue, Washington, United States

• Led a team that developed and managed the Identity and Access Management (IAM) service for the Salesforce Hyperforce environment on AWS. Provided JIT access for ~20k AWS accounts.
• Led multiple complex engineering effort that hardens the JIT credentials. Eg. leverage AWS SCP and hyperforce network artifact to limit the use of JIT creds to production networks only.
• Delivered on multiple company level effort to enable hyperforce on AliCloud and AWS Govcloud.
• Consolidate the IAM management of all AWS account to a central place (complex inventory and technical problem). This effort allowed us to easily deploy Wiz to all AWS accounts.
• Drove multiple cross-functional effort such as detect and remediate orphaned AWS account. Worked with AWS to leverage features specifically built for us to prevent new orphan AWS from being created (via domain.
• Help stood up a sister team in India and helped ramp them up and define charter for them.

Bellevue, Washington, United States

• Original member of a fast growing team within Salesforce that focused on building in-house security services. Worked on multiple IAM services including Kerberos, Directory, MFA, and Production Remote Access.
• Tech lead for a Just-In-Time credential generation service for access to AWS cloud resources for all HyperForce salesforce developers.
• Designed and implemented a generic framework for injecting sidecars to K8S which is widely adapted within salesforce and has been open sourced and presented at kubecon.
• Help salesforce migration to HyperForce by designing and implementing a Kerberos Keytab distribution service for Salesforce K8S workloads - used by HBase team.
• Designed and implemented a patented solution to synthetically generate Yubikey one-time-passwords to allow automation access to hosts in a secure fashion. (United States Patent Application 20200244659)

Working on distributed system security, identity access and management area.

• Windows Core team, specifically on isolation platform technology.
• Designed and developed features in WebAccountManager which is an OS component that allows universal applications to connect to different external identity providers in a converged manner. It became one of the heaviest.
• Defined and developed features in User Model for Windows Core OS which is a truly universal, cross-platform OS. By providing a flexible user model, we enable the shell to tailor an experience based on device type and.
• Maintain and develop features in UserManager service. The service provides functionalities that allows users to logon to the system, as well as manages user separation.Developed and maintained features in Security.

Mississauga, ON

Worked on a secure web browsing Android application that filters the URLs bring browsed.* Worked on an automation framework named Rubidium in Ruby and java.* Created a Java library for simulation of UI interaction an Android device.* Prototyped a Content Locker application for Android which allows secured file browsing in app.* Worked on a project for.

Basc In Engineering Science, Electrical And Computer Option

Activities and Societies: • Dean’s Honor List in Winter 2011Relevant courses include : Machine Learning and Data Mining (in progress).

Bachelor Of Applied Science (Basc), Engineering Science Ece Option