Mashkoor Mohammed

Experience

1. Iam Engineer

   CVS Health

   Sep 2024 — Present · Chicago, IL, US

   Worked on OKTA Access Gateway (OAG), OAuth, OpenID, SAML 2.0, IWA, and API. Integrate the custom-developed independent application with PingAccess to track the owner of the application, which is being protected by Ping Access and PingFederate. Integrated Kerberos with Active Directory to leverage AD\'s Kerberos-based single sign-on (SSO) capabilities, enhancing user experience and security. Led the installation and configuration of identity management solutions such as PingFederate, Okta, and other IAM platforms in complex, distributed environments. Performed system setup, integration with existing infrastructure, and initial configuration to enable Single Sign-On (SSO), identity federation, and multi-factor authentication (MFA). Configured security protocols, such as SAML 2.0, OAuth 2.0, and OpenID Connect, to ensure secure and seamless user authentication and authorization across applications. Led successful migrations from Okta to Azure AD/Entra ID, handling end-to-end processes, including planning, execution, and post-migration support. Integrate Ping with common identity stores like LDAP, relational databases, application servers, virtual directory servers, and physical access management systems. Protected Restful API’s using OAuth in PingFederate so that it can be accessed only with Access Tokens. Design of identity federation connectors from SailPoint to target systems, along with subsequent access control by Secure AUTH. Customized and maintained IAM workflows and user experience interfaces using CSS/Stylesheets and client-side scripting languages to enhance usability and branding alignment. Troubleshooted and resolved issues related to user access and authentication in Active Directory and Entra ID. Implemented PowerShell-based integrations between various identity systems, including Okta and Azure AD, to synchronize user data and streamline operations.