Candidates About

 

                                                          Ganesh Sagar

                                                        

 

·         Around 8+ years of experience in Information Technology in implementation and providing Single Sign on across enterprise applications using Ping Federate, improving technical efficiencies in Identity & Access Management and Single-Sign-On space, involved in designing and implementation of end-to-end security solutions.

·         Worked on O-Auth Integration using Ping Federate and Ping Access and implementing Federation SAML services to SSO into third-party vendors.

·         Experience in installing Ping Access in clustered and high-availability mode, Have knowledge in Upgrade and maintenance of Ping Access and Federation product tools.

·         Implemented a single sign on authentication from Ping Federate Server and AD server. Users are generated on the fly using LDAP import with their corresponding role-based access.

·         Configured Ping Federate 6..x, 7.x, 8.x  for SSO across multiple web-based enterprise applications. Installed and configured PingFederate 7.0.1 with the existing Siteminder environment and used LDAP authentication for the admin console.

·         Experience in configuring SSO with Ping Access using out of the box and custom developed authentication schemes.

·          Proven experience in Installing and Configuring Middleware products , Web Servers.

·         Implement the SSO for new applications with Ping Access and Federation Managers. Configured SiteMinder for SAML Federated Authentications by configuring ID Provider/Consumer using SAML 2.0 POST binding.

·         Experience in analyzing the logs (agent trace logs, server logs, access logs ETA Logs etc.) and Trouble Shooting issues in Integration of other applications using CA SiteMinder (Access Management) and Identity Management tools along with LDAP and Web-server agents and SiteMinder federation services.

·         Experience in designing, development, deployment, migration and implementing Security and Infrastructure solutions using CASSO/SiteMinder r12.51 SP2, Sun ONE Directory Server (LDAP).

·         Configured and defined the policies for SAML Affiliate Agents for federated authentications for users coming from partner sites. Used SAML to implement security to external web applications.

·         Worked on supporting and debugging issues with and implementing SSO solutions with Business Partners using CA SiteMinder and Ping identity solutions for the federation setup.

·         Expertise with IIS, IHS, Apache, Sun One Web servers in Identity and access management environment.

·         Extensive experience installing, configuring and Administrating MS-ADS (Active Directory), IIS, Apache Tomcat, and IBM Websphere.

·         Configuring and troubleshooting Webservers like Apache 2.0/2.2/2.4, IHS 6.1/7.0/8.0, IIS v6.0/7.5/8.0/8.5, and Application servers like Websphere and Weblogic.

·         Good understanding of Web Technologies like HTTP Protocol, fiddler, SAML Trace, HTML, Web-Form encoding.

·         24/7 administration in a web hosting organization providing server and application support (Netscape/iPlanet/SunOne Web, Messaging, Admin, Directory, Proxy, Application)

 

 

 

·         Design & Support: Systems Administration, Project Mgmt, Infrastructure Design, Performance Monitoring, Troubleshooting, Process Improvement.

·         Operating Systems: SUN Solaris 8/9/10, IBM AIX 5.2/5.3, Windows 2008/2k12, Red Hat Linux 6/7x.

·         Applications: VMware Workstation and vCenter, Quest Change Auditor, MS Project, MS Sharepoint, Ping Federate, RSA Security, Double-Take, MS Exchange, @ task for Projects, MS Visio, Microsoft Office Suite, Remedy, Track-IT, SQL, Oracle.

·         Backup Security: Identity and Access Management, Firewalls, VPN, IPSec, SSO, Federated Services, Change Management, PKI, Siteminder 5.x/6.0, 12.x, CA Identity Manager r12, Oracle Identity Manager (OIM) 10g/11g, Oracle Access Manager(OAM) 10g/11g, Oracle Role Manager (ORM), CA SiteMinder/SSO 6.0/R 12.x, (OAAM), IBM Tivoli Suite (ITIM/TIM/TAM) […] Sun Identity Manager 7.0/8.0, Layer 7, Ping Federate, Single Sign On (SSO), Secure Proxy Servers 12.x, SAML CyberArk 9.2, CyberArk 8.2, Incident management 

·         LDAP Directories :Oracle Internet Directory (OID)10g/11g, Oracle Virtual Directory (OVD) 10g/11g, Active Directory, Tivoli directory Server, Sun ONE Directory Server, Novell eDirectory 

·         Programming:  C, C++, Java, Korn Shell Scripting, HTML, XML, WLST, Perl, Jython, Python, and markup Languages HTML, XML, DHTML 

·         Databases: DB2, Oracle 8i/9i/10g, MS-Access, SQL Server 

·         Protocols:  TCP/IP, FTP, SMTP, LDAP, SOAP, JSON, RMI and HTTP

 

 

·         Bachelor’s in Electronical and Communication Engineering

·       Completed my AWS Certification as AWS associate developer.

 

 

 

JPmorgan Chase, NY

IAM  Consultant                                                                            June 2016 to Present

 

Responsibilities: 

·         Created chef data bags to secure ID’s, passwords and data to use in docker images and importing secure data into docker using open stack instances.

·         Worked on OAuth grant types to call the rest service and get the API access by providing JWT tokens.

·         Configured CA API Portal, CA API management tasks, Implementation of Rest based security policies, preparing testing strategies, automating maintenance solution, preparing design document and business requirements and implementation of security templates.

·         Configuring the multiple docker images and creating docker container to provide end-to -end automation of CA API Gateways.

·         Worked on publishing REST API’s to work on migrate roles and server certificates.

·         Installed, configured and maintained CA SiteMinder Policy Server 6.X/12.X, CA IDM r12 on Linux, Windows platforms. 

·         Experience in installing, configuring SiteMinder policy server, Web agents, Transaction Minder, Active Directory server (LDAP) and various Web & Application servers. 

·         Extensively used web services variables to facilitate federation of web services. 

·         Implemented custom attributes properties to track the information about the recipients of the application site. 

·         Installation and Configuration of Siteminder SDK on application servers. 

·         Setup federated Connection with more than multiple partners including jive, MyAtlas, using Ping Federate 8.x versions.

·         Configured Ping Federate 6.x/7.x for SSO across multiple web based enterprise resources.

·         Created and updated the provisioning policies as per the change in the business environment using Policy Xpress. 

·         Worked extensively on creating Custom Password policies and Authentication schemes as per the requirement.

·         Migrated over multiple applications from SiteMinder R6 to R12.5.X in windows and Linux Platform. 

·         Worked with existing user stores and new external LDAP stores. Integrated Active Directory & Sun One directory servers as user stores & SQL Server as Policy store and Key store. 

·         Installation configuration and maintenance of RSA authentication manager 6.x/12.x for enabling token, based authentication along with the form based authentication as a part of the security solution. 

·         Worked with stakeholders to ensure applications, and infrastructure systems are properly assimilated into the IAM RSA Aveska VIA system.

·          Implemented  RSA VIA (formerly Aveksa) platform for access recertification.

·         Developed access request functionality for a new business application within the RSA Identity Management and Governance IMG tool.

·         Worked on One-View Monitor statistics, error corrections for possible problems and worked on the status of Siteminder P1 tickets. 

·         Experience in Configuring CA SiteMinder policy server, framing Rules and Policies, Policy Server maintenance, SSO call clearance, Web Agent & Application agent installations, troubleshooting production problems. 

·         Integrated SiteMinder to ADFS using Federation services running at SiteMinder end using SAML2 .0 token type 

·         Installed, configured and integrated Web servers (plug-in file), SiteMinder agents and LDAP user directory with Weblogic Server V10. 

·         Migrated SiteMinder Federation Gateway on Secure Proxy server (SPS) from Windows to Linux platform. 

·         Experienced in assisting Web Administrators, LDAP Administrators to determine what the best values for SiteMinder parameters and tune the system to boost SiteMinder performance in the Web Tier, the Application Tier, and the Data Tier. 

·         Performed user provisioning in Identity Provider (IdP) site Service Provider (SP) site using SAML for SSO  

Environment: Netegrity SiteMinder 5.x/6.x, Identity Manager 6.0, Web agents 5.x/6x, Webshphere 5.x,/ 6.x, Apache 2.x, IIS 5.0/6.0, Sun ONE Directory Server 5.2/6.1, SAML, XML, LDAP, LDOM 1.1, Solaris (10), Unix, Linux, Sun Iplanet6.0/6.1, IIS 5.0/6.0, ANT, JACL, Foglight, Unix shell scripts, Jython, Struts, Hibernate, Java/J2SE 1.4, J2EE 1.3, Eclipse, SOAP, UDDI, IBM Rational ClearCase

 

State of  Newyork, NY                                                                                                                                              IAM  Consultant                                                                                                     May’2014- June’2016

Responsibilities:

·         Worked on API Gateway Migration Utility migrate-Out, migrate-In, manage-Mappings to Migrate the entire gateway for automation.

·         Working on REST API’s to make call to gateway to make client connection and generate JWT token.

·         Setup federated Connection with more than multiple partners including jive, MyAtlas, using Ping Federate 8.x versions. 

·         Configured Ping Federate 6.x for SSO across multiple web based enterprise applications. 

·         Implement Federation SAML1.0/2.0 services to SSO into third party vendors like Cornerstone, Empire Blue, and Hallmark. 

·         Troubleshooting and monitoring of various proprietary Acxiom and 3rd party applications using Cloud Watch in the Amazon Web Services (AWS) environment.

·         Served as technical lead for numerous integration projects between Checkpoint and other internal and external applications and clients, including adding outbound SSO connections using Ping Federate and SAML 

·         Experience in debugging the SAML Errors by using fiddler trace and SAML Tracer. 

·         Experience with the implementation of RSA two factor authentication tokens for the integrated web service security in a SSO environment for the service provider applications. 

·         Experience with configuring IdP initiated and SP initiated SAML profiles with different bindings like POST, Artifact, Redirect as per the custom business and security requirements. 

·         Configured SSO Integration Adapters for session cleanup as part of Single Logout (SLO) in the SSO implementation. 

·         Creating OpenSSL Certificates and using the same for Federation of external Services to achieve the purpose of maintaining confidentiality, message integrity and bilateral Authentication. 

·         Worked with existing user stores and new external LDAP stores. Integrated Active Directory & Sun One directory servers as user stores & SQL Server as Policy store. 

·         Experience in trouble-shooting the issues by analyzing the trace and TAI logs. 

·         Expertise in Configuring CA SiteMinder policy server, creating agents, ACOs, Domains, Rules, Responses and Policies, Policy Server maintenance, SSO call clearance, Web Agent & Application server agent installations, trouble shooting in all the environments. 

·         Configured Node manager for administration of Managed servers.  

Environment: RedHat 6, JDK 1.4/1.5, J2EE, JDBC, XML, SAML 2.0, CA SiteMinder 6.X/12.X, Sun ONE Directory Server 5.X/6.X, CA Identity Manager r8/r12, Tomcat 5.5, Apache 2.2.x, Solaris 8/9/10, Windows 2003/2008/2012, Oracle 10g/11g, Weblogic 10.3.x, Websphere 8.5.5.9

 

 

Disney, CA

Siteminder/LDAP Consultant                                                                         Dec’2012 – April’2014

 

Responsibilities: 

·         Created Docker Images for Configuring API Gateway, Configuring my sql and migrating gateway and joining individual images to make complete automation.

·         Integrated API Gateway with siteminder and OAuth protocol to give single sign on for different applications.

·         Implementation of federation Services (SAML 2.0) through CA SiteMinder with third party vendors for Single- Sign-On both as Service provider and Identity provider. 

·         Configured and setup Secure Sockets Layers (SSL) for data encryption and client authentication. 

·         Exported the policies for migrating them to oracle Database from LDAP. 

·         Creating proxy from External DMZ to Internal DMZ for secure connections of the applications. 

·         Configured Kerberos Authentication with application server that has Web agent to authenticate users where agent connects to Policy server and active directory. 

·         Worked on installation and configuration of Web Servers such as Apache (2.x), IIS 5.x

·         Worked on implementing the Reverse Proxy on Apache webserves(2.0) from DMZ servers to the internal servers. 

·         Worked on IP restriction using SiteMinder to authenticate users working from the external company. 

·         Implemented Federation with the cloud environment (Salesforce.com) for multiple organizations by creating custom domains. 

·         Implementation of federation Services (SAML 1.0/1.1) through Netegrity/CA SiteMinder with third party vendors for Single-Sign-On both as Service provider and Identity provider. 

·         Implemented federation services (SAML) across multiple platforms (SiteMinder, IBM Tivoli, Ping Federation Services, Custom Code). Troubleshoot issues related to SAML implementation. 

·         Integrated Policy Store with LDAP to use LDAP user repository. 

·         Exported LDAP database as LDIFs and import the same using console and command line. 

·         Worked extensively on creating Custom Password policies and Authentication schemes as per the requirement 

·         Worked with existing user stores and new external LDAP stores. Integrated Active Directory & Sun One directory servers as user stores & SQL Server as Policy store. 

·         Experienced in SiteMinder Test tool and SiteMinder policy server log files for Troubleshooting SiteMinder environment. 

·         Worked closely with development and testing teams to troubleshoot issues and implement fixes in development, test and production environments. 

Environment: CA SiteMinder 5.5/6.0, CA IDM r8 Sun Java System Directory Server LDAP 5.x/6.x/7.0, Web Sphere Application Server 5.x/6.x, SSL, SNMP, UNIX, LINUX, Solaris, IBM AIX, Windows

 

Infotech,  India                                                                                                                    Aug 09  - Oct 12   UNIX/Linux System Administration

Responsibility:

●     Set up and configuring of Linux (RedHat& SUSE) and Solaris servers/workstations for clients.

●     Configuring the NFS servers, setting up servers in network environment and configuring FTP/NTP/NIS servers, clients for various departments and clients.

●     Experience working with high availability, high performance, multi-data center systems and hybrid cloud environments.

●     Handling the scheduling tasks (cron jobs and task scheduler) for the scripts for various purposes.

●     Troubleshoot complex issues ranging from system resources to application stack traces.

●     Daily execution of build ops in an automated and continuous process.

●     Involved in support databases and performed MS SQL upgrades running on Windows servers.

●     Compiling code to move into test environments via automated processes.

●     Installation, configuration and administration of Linux (RedHat/SUSE, Centos).

●     Troubleshoot build and deploy failures, and facilitate resolution.

●     Configuring network services such as DNS/NFS/NIS/NTP for UNIX/Linux Servers.

●     Improve speed, efficiency and scalability of the continuous integration environment.

●     Logged all events to log files.

●     Extensive knowledge of Linux/Windows based systems including hardware, software and applications.

●     Creating a change requests, work orders and problem tickets using BMC Remedy tool and getting approvals from higher officials.

●     Experience in development with Perl, Python, PowerShell or other scripting languages.

●     On-call support for 24/7 for troubleshooting production issues.

●     Project Management for various UNIX/Linux/Windows system integration projects.

Environment: RHEL, Solaris, AIX and Windows, ShelliPlanet4.1, Python, BMC Remedy, SunOne 6.1, IIS 6.0, Windows 2008, Linux, Shell Scripting, Oracle 9i.