Butchi

Identity & Access Management (IAM) professional with 13+ years of experience designing, implementing, and supporting enterprise authentication and single sign-on (SSO) solutions across the Ping Identity suite (PingFederate, PingAccess, PingDirectory, PingID) and Oracle Identity Management/Access Management platforms, on-premises and in the cloud. Proven record securing 1,000+ enterprise applications for large healthcare and banking organizations — including Kaiser Permanente and Emirates NBD — spanning SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) federation, multi-factor authentication (MFA), certificate lifecycle management, disaster recovery, and 24/7 production support. Trusted by CIAM, security, and application teams to resolve complex authentication incidents, harden identity infrastructure, and keep mission-critical access uninterrupted.

Ping Identity Support Engineer / System Administrator - Kaiser Permanente (via Tata Consultancy Services – TCS) - Englewood, CO

(2024-01)

Support PingFederate, PingAccess, and PingID MFA for enterprise authentication and the CIAM platform, which manages customer and partner identities across SAML, OAuth 2.0, and OIDC application onboarding.

• Delivered Level 2 (L2) production support for SSO and PingID MFA across 1,000+ enterprise applications, troubleshooting complex authentication and login issues for internal and external users.
• Diagnosed SSO failures by analyzing SAML assertions, OAuth 2.0/OIDC flows, tokens, cookies, and HTTP headers, restoring access with minimal business disruption.
• Remediated PingFederate IdP/SP connection issues spanning adapters, authentication policies, attribute mappings, and session management.
• Supported new application onboarding and CIAM integration using SAML, OAuth, and OIDC, including metadata exchange and certificate configuration.
• Resolved PingID MFA issues including device binding, push notification failures, offline authentication, and policy enforcement.
• Executed CIAM runbooks to deploy and support PingFederate, PingAccess, and PingID MFA configurations across test and production environments.
• Monitored CIAM environments for failed authentication transactions and connection errors, safeguarding accurate identity data flow.
• Conducted root cause analysis (RCA) for authentication, SSO, and MFA incidents and implemented permanent fixes based on server and application log review.
• Partnered with CIAM development and security teams to strengthen logging, monitoring, and alerting dashboards in Dynatrace.
• Enforced IAM/CIAM security policies, supported access reviews and certificate management, and resolved access issues for users and application teams.
• Environment: PingFederate · PingAccess · PingDirectory · PingID · CIAM · SAML · OAuth 2.0 · OIDC · Dynatrace

Ping Identity Implementation Engineer / System Administrator - TechFlurry Solutions

(2023-10 - 2023-12)

• Implemented PingFederate 12.2 on-premises — installation, configuration, and integration with enterprise applications — configuring IdP/SP connections, authentication policies, and SSO workflows for secure user access.
• Managed certificate generation and updates to secure SAML, OAuth 2.0, and OIDC communications.
• Designed and implemented a clustered PingFederate environment delivering high availability, load balancing, and fault tolerance for enterprise SSO services.

IAM Technical Consultant - Gulf IT Network Distribution - Dubai, UAE

(2020-09 - 2023-09)

• Implemented PingFederate 12.2 in an on-premises clustered environment, configuring IdP/SP connections, authentication policies, and SSO workflows for enterprise applications.
• Deployed PingAccess for policy-based access control securing web applications and APIs, and integrated PingID MFA for multi-factor authentication.
• Onboarded 1,000+ enterprise applications, configuring SAML, OAuth 2.0, and OIDC integrations for seamless authentication.
• Resolved authentication, SSO, and MFA issues by analyzing logs, SAML assertions, and OAuth/OIDC flows, ensuring uninterrupted user access.
• Monitored server health, application performance, and authentication transactions while supporting user onboarding, access provisioning, and de-provisioning.
• Managed certificate generation, renewal, and updates (IdP/SP SSL and signing certificates) to secure inter-application communication.

IAM Senior Technical Consultant - Emirates NBD - Dubai, UAE

(2015-10 - 2020-08)

One of the largest banking groups in the Middle East; focused on digital banking and secure technology solutions, including SSO, MFA, and identity management initiatives.

• Implemented and configured PingFederate and PingAccess to deliver secure SSO for enterprise applications.
• Led migration of authentication and SSO services from Oracle Access Manager (OAM) to PingFederate, ensuring a seamless transition with minimal downtime.
• Onboarded applications and user populations, configuring SAML, OAuth 2.0, and OIDC integrations for seamless authentication.
• Performed annual PingFederate disaster recovery (DR) testing to validate business continuity readiness.
• Managed the certificate lifecycle, including IdP/SP SSL and signing certificates, to maintain secure communications.
• Performed PingFederate upgrades and security patching to keep the environment secure, stable, and current.
• Monitored PingFederate servers and services via dashboards and alerting tools, proactively detecting issues.
• Responded to monitoring alerts, performed root cause analysis, and implemented fixes to maintain high availability and uninterrupted SSO services.

Principal Consultant - Oracle India Pvt Ltd - India

(2013-01 - 2015-10)

• Implemented the Oracle Identity Management (IDM) 11gR2 stack in a cloud environment, delivering secure, scalable identity services.
• Installed and configured Oracle Identity Administration (OIA) 11gR2 on WebLogic 10.3.6.0.10 for enterprise identity management.
• Developed and enforced custom password policies to strengthen authentication and compliance.
• Built connectors to automate user provisioning based on product selections and business rules.
• Managed production environments, resolving issues promptly to minimize downtime.
• Performed system monitoring, troubleshooting, and performance tuning for WebLogic servers and IDM components.
• Integrated enterprise applications to enable SSO, provisioning, and role-based access control.
• Documented installation procedures, configuration details, and support runbooks to standardize processes and enable team knowledge transfer.

Master of Computer Applications (MCA) - S.K. University, India