Vinod Bubanale

Identity Security Senior Engineer with 4+ years of experience in implementing, administering, operations and supporting enterprise Identity and Access Management (IAM) solutions across financial services, retail, manufacturing, and life sciences. Hands-on expertise across Okta, PingFederate, Ping One, Microsoft Entra ID, OpenIAM, and Cisco Duo, spanning SSO, MFA/Adaptive MFA, Identity Federation (OAuth 2.0, OIDC, SAML 2.0, SCIM), RBAC/ABAC, and Identity Lifecycle Management (JML). Proven track record IAM platform migrations, application onboarding, API integrations, and production go-lives, with strong cross-functional collaboration across architects, business stakeholders, and application teams.

Identity Security Senior Engineer at ProNoesis Pvt. Ltd. (2024-06 – Present)

• Client: Concentrix — Okta Workflows & IGA Migration to Saviynt
• IAM discovery and migration assessment for Okta Access Management and Identity Governance, documenting technical, business logic and migration requirements for Saviynt.
• Analyzed and translated 100+ Okta Workflows into business logic, and functional specifications, for migration-ready documentation.
• Assessed identity lifecycle management (JML), provisioning, reconciliation, access governance, and certification campaigns; evaluated integrations with Microsoft 365, Active Directory, and Workday.
• Reviewed and documented existing SSO (SAML 2.0, OIDC), Adaptive MFA policies, and RBAC/ABAC configurations (Okta groups and rules) as part of migration scope and target-state design for Saviynt.
• Partnered with IAM architects and business stakeholders to identify migration gaps and recommend scalable governance solutions.
• Client: FayrEdge — OpenIAM
• Administered and implemented OpenIAM solutions, configuring RBAC, SSO, OAuth 2.0 clients, and core system components (Consent Management, Authentication Providers, Notification Templates).
• Developed and customized OpenIAM REST APIs to automate User Lifecycle Management (JML) and produce API documentation; automated ACL configuration for fine-grained authorization.
• Client: Kroger — PingOne Migration
• Integrated enterprise applications with PingOne (SAML 2.0, OAuth 2.0, OIDC, legacy auth) and supported migration from CA SiteMinder, IBM TFIM, Kroger Identity, and Maverics.
• Developed PingOne Expression Language (PEL) rules for dynamic authorization and access control; configured MFA and managed application sso production go-lives.

Software Engineer at Persistent Systems (2022-06 – 2024-03)

• Client: ThermoFisher Scientific
• Migrated 100+ enterprise applications from CyberArk to Microsoft Entra ID (SAML 2.0, OAuth 2.0, OIDC); coordinated end-to-end migrations with global application owners ensuring minimal business disruption.
• Client: Pacific Gas and Electric (PG&E)
• Implemented and administered IAM solutions using PingFederate; onboarded enterprise applications supporting SAML 2.0, OAuth 2.0, and OIDC, including legacy and non-standard apps.
• Developed Java/Spring Boot REST APIs leveraging PingFederate and Microsoft Entra ID Graph APIs to automate certificate management and application onboarding; built migration tooling for SAML/OAuth/OIDC client provisioning.

B.E. in Computer Science and Engineering – Gogte Institute of Technology (GIT)