Sunil Raju, M.Eng., P.Eng., CISSP

* Provide SailPoint Solution Architecture and development expertise to resolve TD Identity and Access Management issues * Design and develop SailPoint Artifacts to support SailPoint integration with target systems, develop custom integrations, and act as a reliable troubleshooter to resolve urgent Production issues. * Examine SOWs and provide expertise in IAM Vendor Management and validate RFP responses in IAM domain. * Work with TD resources to chalk out the IAM Roadmap.

• Provide SailPoint hands-on implementation and architectural services to large Educational and Financial Institutions. • Acted as a guide/go to person to the team for Sailpoint IdentityIQ issues and troubleshoot SailPoint production issues. Designed and created SailPoint artifacts like Workflows, Forms, Rest API Plugins, Rules etc. to address customer needs. • Integrated SailPoint IdentityIQ and ServiceNow using OAuth and SCIM API to address the customer needs and satisfy organization's strict security requirements.. • Architected the solution for SailPoint and PAM Tool integration for BeyondTrust, CyberArk

• Established the deployment architecture for SailPoint and develop SailPoint solution architecture to address customer requirements with POCs to address technical solution feasibility and identify SailPoint artifacts to be developed. • Initiated the organization-wide usage of SailPoint IdentityIQ as the IAM tool of choice and kick started the initial IdentityIQ setup and created documents for implementers/installers/administrators to follow. • Regularly participated in/led IAM Administration/Development and Governance requirements and establish system onboarding requirements. • Acted as a liaison between the organizational and SailPoint to resolve technical issues. • Created workflows/rules/APIs/Plugins to serve as a guidance for developers to follow. Developed business specific custom connectivity solutions between IdentityIQ and external systems. • Setup server hardening guidelines and deployment considerations for the IAM stack and generated documents for team to follow.

• Established the company wide SailPoint Solution Architecture to migrate ScotiaBank IAM infrastructure from Sun Identity Manager to SailPoint IdentityIQ. . Designed and created IT and Business roles following RBAC model. • Migrated the IAM infrastructure to SailPoint IdentityIQ in promised timeframe with new architecture providing enhanced (10x) performance, resilience and reliability. • Created Custom Workflows, Rules, Forms, Task Definitions, Objects, searches, on-boarded applications, Quicklinks and other IIQ Artifacts etc. to satisfy the customer IAM requirements. • Successfully passed Bank's stringent and mandated critical software security requirements. • Managed the deployment from Development to Production environment. Onboarded critical banking applications and interacted with integrated Service Now for Change and Ticket Management for provisioning. • Served as a Hands-on resource supporting team to resolve IAM challenges, production troubleshooting and a go to resource for IAM issues. • Delivered the solutions in given time without any Sev 1 defects consistently. • Guided Bank-wide teams on usage, features and address the business requirements within IAM Framework. • Provide cost estimation. • Won accolades from the upper management and colleagues for the quality of the work, agility and teamwork. • Architect and implement the solutions to fit in IIQ infrastructure leveraging Web Services Architecture (Rest API) • Analyze the Oracle Waveset code and re-architect/design/develop corresponding IIQ artifacts. • Act as a guide on SailPoint IIQ. Coordinate with the team and other departments to meet Identity Governance requirements. • Support QA efforts and solution deployment to production and assist in IIQ migration to Version 7.3. Technologies SailPoint IdentityIQ 6+, 7.3, Tomcat App Server, Web Services Framework, Fortify WebInspect and Static Code Analyzer (Security Analysis Products), J2EE, GitHub, Jenkins, Maven

• Performance Benchmark a 10 million plus user base mission critical Customer Authentication Management System • Analyzed bank-wide multi-datacenter, multi-tier IAM backbone under stress, for its reliability, performance, stability, failover/failback capabilities, and validate the Load Balancer and IAM System configuration. • Stressed the IAM infrastructure to discover performance bottlenecks, find bugs (code and configuration related) under heavy loads. • Presented to the findings to upper management to decide suitability of IAM infrastructure for production operations and meeting the SLAs • Act as a guide on ForgeRock stack, configuration, and troubleshooting, assisted and coordinated with development group to fix discovered issues. Technologies ForgeRock OpenDJ, OpenIDM, OpenAM, Oracle DB, HP Performance Centre, J2EE

• Architected and implemented a Multi-factor Authentication Management system using Twilio SMS APIs and PingFederate • Enabled Single-Sign on using PingFederate. Expertise in using various Integration adapters and deep knowledge of custom adapter development and SSO flows to address challenging SSO based integration solutions. • Implemented an UnboundID DataSync based Synchronization engine to provide high-speed sync between LDAP and Web Service based target data repositories. • Provide 24x7 Production support to a critical OAM, OIM, OVD and DSEE based Identity and Access Management system in Health sector. • Investigated migration paths for Sun IDM based Identity Management System to SailPoint IdentityIQ • Established the critical steps required for implementing an Identity management solution using RSA Aveksa. • Customized OAM to address customer-specific security requirements and investigated the possible solutions to address the Audit findings. Technologies OAM 11gR2, OIM 11gR2, PingFederate 7.3, Twilio SMS API, OVD, DSEE, UnboundId Sync, OAM 10g, RSA Aveksa, J2EE, Weblogic, ODSEE, RSA Aveksa, Tomcat etc.

• Support OAM (Oracle Access Manager), OIF (Oracle Identity Federation), OID, OVD, Oracle Database based IAM infrastructure. • SSO enable applications using IAM infrastructure (OAM and OIF) • Troubleshoot access management (Single Sign-On, Identity federation) issues • Guide the team on the usage of the OAM, its configuration and management • Manage Oracle Internet Directory as Identity Repository and handle related configuration tasks • Apprise upper management of the IAM infrastructure roadmap through presentations and write-ups • Act as an IAM resource to the assist other groups • Develop custom tools/scripts to handle IAM related tasks Technologies Oracle Access Manager, Oracle Identity Federation, Oracle Internet Directory (LDAP), Weblogic Server, J2EE, Oracle DB, Webgates, OHS, JMeter, J2EE, LDAP API, IIS, IBM WebSphere

* Knowledgeable in Installation, deployment and configuration of Oracle Identity Manager, Oracle Access Manager, SOA Server, OID, OVD and Oracle Database to achieve a working IAM system. * Integrated OIM with LDAP and database based resources to facilitate provisioning * Created roles to facilitate role based access control (RBAC) to resources * Investigated the OAM upgrade from OAM 10g to OAM/OIM 11gR2 and presented the client with upgrade details. * Create custom approval workflows for request-based provisioning to resources. Knowledgeable in custom development using J2EE, Web Services, BPMN to create custom workflows. * Investigate usage of Oracle Identity Analytics, Oracle Entitlement Server for role management and fine grained authorization. * Investigate LDAP Sync vs. LDAP Adapter-based provisioning in OIM * Integrate OAM with OID and ODSEE as Identity Store. * Trained in OIM/OAM installation, deployment and administration.

* Designed and developed LDAP schema and LDAP-based Identity Architecture to handle multi-million (excess of 10 million user base) with 24x7 availability. * Integrated Open IDM with OpenDJ LDAP and databases and developed custom RESTFul end points. * Facilitated Access Management through Ping Identity using OAuth Architecture with OpenDJ as Identity Repository. * Experienced in the use of RESTFul access to OpenDJ (LDAP). * Thoroughly knowledgeable of techniques using OAuth, OpenID connect, Policy Agents and SAML etc.to facilitate SSO, Authentication and Authorization in enterprise systems. * Performed intensive performance testing on the OpenDJ to handle multi-million user base and challenges that go with it. Experienced in Replication configuration and LDAP configuration for high performance. Managed LDAP as a whole for the project. * Experienced in the deployment of the Identity Management solution in Amazon Cloud environment. * Thoroughly familiar with use of Access Management tools (Ping Identity and Open AM) * Followed Agile Methodology for Software Project Management to achieve the end results. Tools Used Ping Identity, Open DJ by Forgerock, Open IDM by Forgerock, Amazon Cloud Services, Oracle Database, MySQL Server, Orient DB, Microsoft AD LSD, Amazon Load Balancers, Amazon Linux, Amazon Cloud Environment.

• Chalked out IAM Strategy. Researched Sun, Oracle and Microsoft IAM solutions and presented roadmap to upper management. Presented concepts of IAM, its potential in resolving day to day identity issues and its overall role in Identity Management plus Application Access Management to Management. • Created Sun IDM based architecture to address customer requirements. • Automated Employee Identity Management, Access Manager (AM) and Directory Server (DS). Experienced in full IDM program implementation for a company. Integrated IDM with external systems like databases, SAP, LDAP, Databases etc. through custom development. • Skilled in writing custom IDM workflows, ActiveSync, XPRESS code, Adapters for IDM. Served as a crucial resource for resolving IAM issues. Regularly worked with Corporate Security to resolve access issues and satisfy Sarbanes-Oxley Act. • Acted as centralized resource for identity management. Implemented secure access to applications using AM, IDM, Policy Agents and Directory Server to support Single Sign On. • Provided RBAC (Role Based Access Control) capabilities for automated authorization management in IDM and external applications. • Managed the Sun IDM Upgrade to Oracle Waveset. Trained in Oracle Identity Manager (OIM) Administration and Development and investigated Sun IDM Upgrade path to OIM. • Established the overall J2EE based architecture and aided in the development for a centralized company-wide API supporting 100s of applications. • Pushed the applications to production following structured Release and Configuration Management processes. • Designed and developed enhancements to crucial customer facing applications and created Web Service artifacts to support SOA. • Technologies Weblogic Server, Oracle, Sun Solaris, AM, DS, Netbeans, Sun IDM, OIM, J2EE, XPRESS, XML, UML Notation, JDBC, Java Message Service, Clearcase, ClearQuest, Ant, Log4J, XML, EJB, LDAP, STRUTS, Maven, Web Services, SOA, Gomez Performance Networks

• Established the overall J2EE based architecture (MDB, Entity Beans, Session beans, JMS etc) using Sun Directory Server (LDAP), Oracle database and “Centerra” as Content Addressing System, to enable electronic verification and storage of paper cheques for US Treasury Department. • Designed and implemented the Authorization Engine (Entitlements Server) for the US Treasury PCC initiative using J2EE and Sun Directory Server and Oracle Database. Application to serve as a model for US Treasury. • Also served as Team Lead in first phase of the project and jump-started the execution. Established tasks for the project based on business requirements and usecases. Deeply involved in the coding process and aided other developers on the project on the usage of security system and provided clarification of business requirements. • Investigated and implemented cluster-wide caching strategies for Weblogic Server. Interfaced Weblogic and MQ Series and served as a key resource for MQ Series related implementation, management and support. • Regularly dealt with the US Client for business requirements analysis and provide clarifications and suggestions on system architecture and implementation.