Yogesh Jamdar

About Yogesh Jamdar

I\'m an engineer working across Identity, DevOps and platform reliability — mostly around Keycloak, Ping, Kubernetes/OpenShift and SSO systems built with OIDC and SAML.I like building and maintaining systems that teams can trust every day.What I focus on– Keeping identity platforms stable, predictable and clean across environments– Simplifying older setups, improving configurations and reducing onboarding friction– Debugging complex authentication flows across apps, Keycloak, PingDS and backend services– Making deployments reliable and strengthening areas that tend to break during upgrades or infra changesKey work I’ve been part of– Major Keycloak upgrades and configuration cleanup across SIT, UAT and PROD– Externalized Infinispan caching via DataGrid Operator– Directory-service automation and PingDS replication/data-copy workflows– ESO + GCP Secret Manager integration to standardize secret handling– Certificate lifecycle improvements and rollout readiness– OCP3 → OCP4 uplift validation across environmentsHow I work– Understand the system end-to-end before touching anything– Stabilise what’s unstable– Automate what repeats– Fix issues with clarity, ownership and long-term thinking– Document what matters and help teams use the platform confidentlyWhat matters to me,Clarity, responsibility and good engineering practices.I like working with people who build things, solve real problems, and care about reliability and identity systems at scale.Outside of engineering, I enjoy building small projects, learning continuously, and connecting with people who think deeply about identity, reliability, and platform engineering.

Experience

1. AVP Senior Devops & Identity Engineer

   德意志银行

   Apr 2020 — Present · Pune, IN

   I work across the bank’s central identity stack — mainly Keycloak, Ping and OpenShift/Kubernetes. My focus is on keeping authentication flows stable and predictable, especially during upgrades, infra changes and multi-application integrations. I spend most of my time simplifying older areas, fixing integration gaps, improving consistency across environments and validating changes end to end.– Led Keycloak uplift across SIT, UAT and PROD involving module updates, adapter changes, cleanup of legacy configurations and end-to-end OIDC/SAML validation.– Integrated externalized Infinispan caching via DataGrid Operator and aligned clustering behaviour with Quarkus runtime.– Improved realm/client structures, mappers, protocol settings and onboarding patterns to reduce friction for application teams.– Tuned OpenShift workloads (OCP4) including readiness/liveness behaviour, rollout patterns and cross-environment configuration alignment.– Supported OCP3→OCP4 readiness by validating namespaces, RBAC, deployment behaviour and SSO stability during migration cycles.– Implemented ESO + GCP Secret Manager to eliminate manual secret handling and standardize secrets across environments.– Automated checks for token-flow behaviour, drift detection, realm/config comparisons and platform health.– Delivered PingDS data-copy automation, schema-safe exports and directory-side fixes impacting authentication flows.– Debugged multi-hop OIDC/SAML issues across applications, Keycloak, PingDS and downstream services.– Improved certificate lifecycle handling including truststores, rollover support and expiry tracking.– Supported DB migrations, infra refreshes and TAC/JBoss component alignment by validating identity flows and dependent services.I take responsibility for the areas I work on — understand the system end to end, stabilise weak spots, automate what repeats and make sure teams relying on identity services get a consistent and reliable platform.

Education

• St. Francis Institute Of Technology

  Bachelor of Engineering (B.E.), Information Technology

  2006 — 2011