CA SiteMinder, SSO, Ping Identity, Federation
Resume:
Pranitha
********.****@*****.***
SiteMinder Consultant: Experience in the Identity and access management, which includes demonstrated work experience in design, develop, implementing and test in enterprise wide security applications.
Professional Summary:
Around 8+ years of experience in analysis, design, development, implementation and maintenance of enterprise wide SSO security with CA SITEMINDER Policy based services.
Experienced in SiteMinder Policy Server Up gradations from R12 to R12.5 and R12 to R12.52 and 6.0 to R12,
Proficiency in configuration of SiteMinder Authentication Schemes, Policies, Realms, Rules and Responses
Configured SiteMinder Web Agents on Web Servers like IIS, Apache, Domino Web Servers and Application Servers like Tomcat and Web logic, Web Sphere.
Experience in SAML 1.1 and SAML 2.0SAMLPOST
Configured and defined the policies for SAML Affiliate Agents for federated authentications for users coming from partner sites. Used SAML to implement single sign-on to external web applications.
Experience in using SiteMinder Federation services and web agent option packs to build and maintain Federation infrastructure to provide SSO functionality to external applications.
Experience using PING Identity Solutions for performing the federation aspects in large enterprise networks.
Maintaining and providing OPS support to large scale Access Management systems on both Enterprise and Consumer level.
Installed, Configured, Upgraded a robust scalable Enterprise Directory services with SunOne Directory server (ODSEE).
Managed Enterprise Directory services with few applications with ODSEE.
Managed LDAP Schema and Designed LDAP Sun One Directory Server environment in the company.
Worked on setting up and maintaining X509 Cert based authentications.
Experience and knowledge of Centralized login servers’ implementations.
Experience in implementing IWA authentication schemes.
Experience with working on Assertion Generator Plugins to customize SAML assertions
Experienced in installing and configuring CA Directory Services, Directory Tree, Schema, Indexes and Replication
Experience in using programing languages like Java script, XML and HTML and UNIX shell Scripting.
Experience with installations and configurations on SPS
Uses SPS for Federation and Proxy solutions
Experience working on Enterprise federation to SaaS based apps like SalesForce, Office 365, Yammer
Configured LDAP servers in Multi/Single Master-Consumer configurations and monitored the smooth replication performance.
Proficiency in SiteMinder Administration, Load Balancing, Performance Tuning and High Availability in both UNIX and Windows based environments.
Worked with CA core teams to understand and analyze corporate infrastructures to provide performance improvement suggestions.
Proficiency in managing, maintaining, troubleshooting, and resolving User Authentication and Access issues in a 24x7 production environment.
Experience in working with SPLUNK to handle the issue resolutions more efficiently and quickly.
Experience in working on multiple monitoring systems to understand and analyze various logs and reports to provide a more reliable and efficient support infrastructure.
Used Monitoring tools like HP BAC and WILY to perform the above tasks
Provided close support to Identity management teams w.r.t SiteMinder.
Experience in Identifying process improvements and provide recommendations for more effective troubleshooting of complex hardware and software problems.
Excellent client facing and customer interaction skills
Strong organizational, interpersonal, and project management skills
DXC Technologies, Houston, TX February 2018 – Current
SiteMinder Federation Engineer: Working as SiteMinder specialist with application team to implement federation by acting as Identity provider.
Working on Site-Minder Federation services and web agent option packs to build and maintain Federation infrastructure to provide SSO functionality for various applications.
Created policy server objects like ACO, HCO, Agents, Rules, Realms, Responses and Policies, installed web agents on various web servers and configured agents to integrate existing and new applications in SSO.
Installed and configured Ping Federation environment for SAML Federated Authentications for external partner sites by configuring ID Provider and Service/Consumer Provider using SAML 2.0 POST binding.
Troubleshooted Federation issues working with application teams at partner sites.
Involved in SiteMinder environment upgradation from R12.5 to 12.52.
Worked with Web Administrators, LDAP Administrators to determine what the best values for SiteMinder parameters and tune the system to boost SiteMinder performance in the Web Tier, the Application Tier, and the Data Tier.
Developed POC for Multi-Factor Authentication to evaluate the MFA, CA Strong Authentication products.
Creating SSL certificates on IIS and Apache in Windows and Unix environments.
Configuring Site-Minder Authentication Schemes, Policies, Realms, Rules and Responses.
Configuring and defining the policies of SAML Affiliate Agents where as these policies can be followed by partner sites federated authenticated users. Used SAML to implement single sign-on to external web applications.
Migrating applications from one company to other company using SAML 2.0.
Configuring the migrated applications using Site-Minder Federation services.
Testing the configured application and promoted to Production environment.
Creating policy objects for the application teams to implement secured SSO solutions.
Working on incorporating the Single Sign On Solution for both internal and external clients using the SAML based federation services solution.
Supporting and troubleshooting facilities for existing SAML federation partners.
Install, configure and upgrade SiteMinder Web agents.
Configure Identity Providers and update SAML Certs for SAML and troubleshoot any issues related to it.
Analyze Web Agent, Policy server, application logs, Firefox SAML tracer for day to day troubleshooting.
Anthem, Lafayette, IN January 2016 – December 2017
SiteMinder Engineer: Working as a security engineer to configure, administer and implement IAM solutions to the existing environment
Experience in implementing Security Management solutions for applications to achieve Authentication, Authorization and Accountability.
Worked with application owners to design applications and policies. in SiteMinder policy Server R12 and install Web Agents on web Servers such as IIS 7.x and over, Apache 2.x. Provide Role based access as per requirement.
Supported CA AUTHminder 7.1 and SiteMinder 12.5 integration.
Identify potential problems and proactively identifying solutions to address them in advance. Migrated SiteMinder architecture from R6 to R12.x for 5 different environments.
Install, configure and upgrade SiteMinder Policy Servers, Web agents.
Troubleshooting the upgrades, installations and configuring new applications, new servers to applications.
Experienced in installing and configuring SiteMinder Policy Server and Web Agents on Solaris, Red Hat Linux and Windows environment.
Experience implementing and handling SSO in CA SiteMinder 12.0 and r12.5 environments
Created Ping federate Idp and Sp partners and worked with adapters e.g., Open token adapter.
Experience working with Splunk.
Maintain working relationship with application owners and subject matter experts to determine current and future needs.
On Call 24X7 for SSO related issues and worked on CR’s over nights and weekends as per requirement.
Configure Service providers, Identity Providers and update SAML Certs for SAML and troubleshoot any issues related to it.
Worked with application owners to design applications and design policies in SiteMinder policy Server R12 and install Web Agents on web Servers such as IIS 7.x, Apache 2.x . Provide Role based access as per requirement.
Analyze Web Agent, Policy server, application logs, Fiddler traces for day to day troubleshooting
Extensive experience in Windows, Linux and Unix environments.
Experience in using tools such as WARP, AD EXPLORER, Fiddler, IE Http Headers, CA WILY.
Good Understanding of F5, BIGIP and DMZ and Network configurations.
Work with Minimum supervision on assigned projects. Performing as a team member by understanding personal and team roles and contributing to a positive working environment.
Have a good understanding of Problem Management, Change Management, Release Management and Configuration Management.
Create, Update documentation related to new application or any existing applications.
Responsible for day to day maintenance of Policy Servers and provided 24X7 support to the testing as well as production SiteMinder infrastructure.
Monitor user activity through Wily, create Dashboards and set up alerts and other reports to ensure security is being maintained.
Coordinated with testing team to perform baseline and regression tests on applications.
Expert in maintaining and troubleshooting issues in production environment.
NY Life, NY January 2014- July 2015
SiteMinder consultant: Worked as a consultant to provide security related solutions to organizations.
Extensive knowledge in security domain including Access Manager, Identity management and federation.
Monitoring design and implementation phases of projects and custom component development.
Define access definitions, rules, validations on the data of the services.
Worked for different clients with their day to day issues and providing technical solutions to their challenges with architectural and business needs.
Managing client expectations by ensuring the delivery of the highest quality service.
Installing, configuring CA Directory Server for 12.5 for policy store and key store.
Worked on Installing CA AUTHMinder, CA Risk minder, CA wily and working on issues regarding it.
Experience in Installing and Configuring CA AUTH Minder 7.1.
Worked on Creating AFM profiles for SiteMinder and Cisco VPN integration.
Experience in troubleshooting Arcot State Manager, UDS, SHIM.
Assigned two factor authentications via ArcotID Q&A, OTP and OTT.
Understanding business needs of clients and suggesting products required for the needs.
Developed scripts to migrate the domains, Agents from one environment to another.
Extensive understanding on step up authentication (RSA).
SiteMinder integration with Federation (SAML 2), Ping Federate.
Experience in setting up the environments in RHEL LINUX, Windows and Unix.
Good exposure to wide range of technical issues, problem analysis and resolution focus adherence to organizational Incident, Problem and change Management practices.
InterContinental Hotels Group September 2013- January 2014
SiteMinder Admin: Working as an engineer to upgrade CA SiteMinder from 12.0 to 12.51
Installed and upgraded to Policy servers and web agents from 12.0 to 12.51 in SIT and QA environments.
Working on a plan to migrate the applications by gathering requirements and working on existing issues and preparing a plan of action.
Involved in issue resolution and in meetings with CA support for Design discussions.
Interacting closely with the F5, Akamai and Unix Admin teams to work on server production readiness.
Creating and updating CLI menu commands and working on the existing scripts to migrate them to new environment.
Creating and updating the run book for tier 3 supports and helping IPsoft create monitors for the services.
Installed and troubleshooting issues on CA directory server for PS & KS.
Understanding the Ping Federation and working on any issues regarding the engine or UI.
Performing functionality, unit and failover testing for the new production environment and documenting the results.
Creating test cases for testing CA Identity Management for password services and making changes accordingly with the results attained.
Prepared documentation for all the migrations, upgrades, rollback plan of migrations and knowledge base of day to day issues.
Using Fiddler extensively to troubleshoot issues while using log files.
Working on Windows 2003 and 2008, Linux 6.2 environments with webservers like IIS 6,7.0,7.5, APACHE 2.2 and Tomcat and ASA agents
Hands on experience with configuring IdP initiated and SP initiated SAML profiles with different bindings like POST, Artifact, Redirect as per the custom business and security requirements.
Working on strict deadlines with a 2-member team.
National Institutes of Health (NIH), MD September 2012- September 2013
SiteMinder Technician: Providing SiteMinder troubleshooting, support, and administration for the services and projects of NIH customer's Integration Services Center.
Coordinate and Implement SSO solutions between internal applications and external vendors.
Provide SiteMinder software Installation and Configuration support.
Infrastructure maintenance and SiteMinder administration.
Migrating Applications from SiteMinder 6 to R12 and working on migrating application from R12 to R12.5 in development environment and create documentation.
Troubleshoot problems including complex authentication, SSO, federation issues across all platforms.
Working on a configuration that supports SAML 2.0, Open ID 2.0, and X.509 (PIV) credentials. Support SiteMinder federation services.
Coordinated with the Service providers and identity providers during the SAML Certificate upgrade and architectural changes
Working on issues with Integrating sales force, smart cloud control desk, QlikView with SiteMinder.
Coordination with various teams for integration and testing.
Day to Day tasks involve environment monitoring, solving issues relating to SSO deployment and responsible for system quality assurance and security policies.
Dashboard, Reporting and Monitoring on the SiteMinder systems and its usage.
Worked on creating alerts for Wily Introscope, site scope with support and maintenance.
Configured custom alerts and e-mail notifications based on the business needs.
Setting up of a parallel robust and redundant Disaster recovery environment in a different data center
Perform tuning and day-to-day SiteMinder administration activities. Create documentation regarding issues solved and troubleshooting standard in work process.
Work closely with F5, Networking, and AD teams to resolve any issues or slowness related to logins.
Experience in Troubleshooting urgent priority tickets with minimum response time.
Provide 24/7 support for any application outages or issues related to security functions.
Working on Remedy, Test track pro and Service now ticketing tools.
Experience in working in UNIX, Linux and Windows environments.
Wells Fargo Bank, AZ March 2011- September 2012
24X7 Production Support: Assigned as SiteMinder engineer to implement R12 upgrade and 24/7 support to SiteMinder infrastructure.
Installed, configured, managed and upgraded to R12 from SiteMinder 6.0.
Involved in meetings with application teams to implement single sign on with SiteMinder and implemented SSO across multiple domains and Line of business.
Installed and configured various web agents in accordance with the web servers involved.
Involved in installation and configuration of Wily Monitoring Agents in SiteMinder Infrastructure.
Coordinated with the Service providers and identity providers during the SAML Certificate upgrade and architectural changes.
Documented all design, development and upgrade efforts in testing, staging and production environments.
Applied patches to SiteMinder infrastructure to meet business needs.
Performance tuning for SiteMinder to provide better response time, low latency, high availability and maximum throughput.
Responsible for day to day maintenance of Policy Servers and provided 24X7 support to the testing as well as production SiteMinder infrastructure.
Monitor user activity through one view monitor, error, and other exception reports to ensure security is being maintained.
Responsible for day to day maintenance of Policy Servers and troubleshooting production issues.
Coordinated with testing team to perform baseline and regression tests on applications.
US Bank, SFO, CA January 2010 - March-2011
Access Management Associate: Assigned as a SiteMinder specialist to work closely with application teams to implement federation by acting as an Identity provider.
Installed, Configured and managed CA SiteMinder R12 to implement SSO and work as Identity provider for Department of education.
Have strong knowledge of SAML metadata, and ability to create and configure encryption and digital signature of SAML assertion and SAML response.
Deployed federations with both internal systems and external organizations, aiding partner IT staff where necessary.
Experience in troubleshooting CA SiteMinder Policy Servers, Agents on various Web servers and Identity federation authentication and Federated SSO problems.
Created Realms, Rules, Policies and Responses for protecting applications to work under SSO environment. Implemented password policies for all the applications using SiteMinder.
Configured and maintained patch levels for CA SiteMinder Policy server.
Created SiteMinder Agents for Federated Authentication and Authorization with partner sites.
Administered and supported production SiteMinder infrastructure components including policy servers, proxies, databases, and directories.
Created digital certificates and solved issues related to signature errors.
Co-ordinate and implement the production deployments by achieving minimal downtime of the given environment. Understanding of the interactions between Policy server, Web agent and Federation.
Worked closely with Identity Management team to ensure proper provisioning of SiteMinder users.
Establish and document standards for authentication, authorization, federation, and web services security as related to the SiteMinder environment.
Day to Day tasks involve environment monitoring, solving issues relating to service provider deployment and responsible for system quality assurance and security policies.
Contact this candidate