Siva C.

About Siva C.

With around 6 years of experience in Identity & Access Management (IAM) and cybersecurity, I specialize in designing, deploying, and managing secure authentication and access control solutions for large enterprises. My expertise spans across Single Sign-On (SSO), Multi-Factor Authentication (MFA), API security, identity automation, and cloud identity solutions, ensuring seamless and secure access across on-prem, hybrid, and cloud environments. I have had the opportunity to work with top organizations, including Optum, Juniper Networks, and DXC Technology, where I successfully implemented IAM solutions using industry-leading tools such as Okta, Ping Identity (PingFederate, PingOne, DaVinci, PingAccess), CA SiteMinder, and Azure AD (Entra ID). My work has supported global enterprises in financial services, healthcare, and technology sectors, ensuring compliance with HIPAA and ISO 27001 security frameworks. At Optum, I focused on cloud IAM, security automation, and compliance-driven IAM policies, integrating PingOne, PingFederate, and Azure AD to enable secure authentication for cloud-native applications. I implemented PingOne SSO for workforce and customer authentication, ensuring seamless access across enterprise applications while integrating with Azure AD for centralized identity management. Additionally, I deployed PingOne MFA to enhance authentication security and risk-based access control, ensuring compliance with HIPAA security frameworks. My work with PingFederate involved securing API authentication, SAML/OAuth-based identity federation, and policy-driven authentication enforcement. At OneMain Financial, I played a key role in deploying and managing Okta as the central Identity Provider (IdP), improving authentication efficiency and security posture. I integrated Okta SSO with SAML, OAuth 2.0, and OpenID Connect (OIDC) to provide seamless authentication for cloud and enterprise applications. My work included implementing Okta Adaptive MFA, enhancing security for high-risk transactions and privileged user authentication. Additionally, I optimized Okta Universal Directory (UD) and SCIM provisioning, automating user onboarding,(RBAC), and (JIT) provisioning. At DXC Technology, I was responsible for managing and optimizing CA SiteMinder authentication infrastructure, ensuring high availability, scalability, and compliance. I configured and maintained SiteMinder Policy Servers, Web Agents, and Secure Proxy Server (SPS), securing authentication and access management for enterprise applications.

Experience

1. Sr Information Security Engineer

   Optum

   Aug 2022 — Present · Fairfax, VA, US

   Implemented PingOne as the centralized IAM platform for workforce and customer authentication, ensuring seamless and secure SSO experiences.• Integrated PingOne SSO with enterprise applications using SAML, OAuth 2.0, and OpenID Connect (OIDC) for unified authentication.• Deployed PingFederate for secure identity federation, enabling authentication between on-prem, hybrid, and cloud environments.• Designed OAuth 2.0 security policies in PingFederate, securing API authentication and token-based access management.• Implemented PingOne MFA, enforcing adaptive authentication and step-up security policies for high-risk transactions.• Integrated PingOne MFA with Azure AD Conditional Access, enabling policy-driven authentication enforcement.• Configured biometric authentication and OTP-based MFA, enhancing security while minimizing authentication friction.• Integrated PingOne and PingFederate with Azure AD, enabling federated authentication and cloud identity synchronization.• Implemented Azure AD Conditional Access Policies, securing authentication workflows with risk-based access control mechanisms.• Managed Just-in-Time (JIT) provisioning and SCIM integrations, streamlining user lifecycle management and reducing administrative overhead.• Designed and automated authentication workflows using PingOne DaVinci, improving user experience and security posture.• Orchestrated identity verification processes by integrating PingOne DaVinci with third-party fraud detection and risk assessment tools.• Automated security workflows, enabling real-time authentication risk assessments and policy-based security responses.• Integrated PingOne and PingFederate with SIEM tools (Splunk, QRadar), enhancing real-time identity security monitoring.• Configured centralized logging for authentication events, ensuring proactive threat detection and incident response.• Successfully deployed PingOne SSO & MFA, enhancing authentication security across cloud and onprem applications.

Education

• CVR College of Engineering, Hyderabad

  Bachelor's degree, Electrical and Electronics Engineering

• George Mason University

  Master's degree, Information Systems