Ashwani Kumar
IAM Engineer
Bangalore,Karnataka
Summary
Identity and Access Management (IAM) Engineer with ~5 years of experience specializing in Single Sign-On (SSO), identity federation, and secure access management using Ping Identity solutions. Experienced in integrating enterprise applications using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) and implementing Multi-Factor Authentication (PingID) to strengthen authentication security.
Hands-on experience onboarding 500+ enterprise applications into SSO environments across large enterprise clients including Uniti (200+ applications) and Hewlett-Packard (300+ applications). Skilled in PingFederate configuration, SSO onboarding, troubleshooting authentication issues, certificate management, and identity integration with application teams.
Proficient in IAM operations, incident management, and application onboarding processes, with strong troubleshooting skills using SAML Tracer, Postman, logs analysis, ServiceNow, and SharePoint. Additional experience working with Java, Spring Boot REST APIs, and Azure DevOps within Agile environments to support secure identity integrations and enterprise IAM platforms.
Overview
5
5
years of professional experience
4
4
years of post-secondary education
2
2
Languages
Work History
Senior Specialist
HCL Tech
Bangalore, Karnataka
09.2025 - Current
- Led SSO onboarding for 300+ enterprise applications (EPRIDs) for Hewlett-Packard (HP), consulting with application owners to integrate applications with the HP SSO ecosystem.
- Analyzed application architecture to determine SSO feasibility, evaluating whether the application was web-based, database-only, UI-based, or infrastructure-supported before initiating integration.
- Implemented SSO integrations using SAML 2.0 and OpenID Connect (OIDC) by coordinating with application teams and configuring environments in staging/ITG before production rollout.
- Guided application owners through SSO requirements, integration steps, and security best practices, ensuring compliance with enterprise IAM standards.
- Investigated and resolved SSO-related incidents and integration issues using PingFederate, PingID, logs analysis, SAML Tracer, and Postman.
- Managed certificate updates and configuration changes within PingFederate and supported application teams during SSO troubleshooting.
- Provided on-call support for P1 and P2 incidents, analyzing user impact and coordinating resolution for critical authentication issues.
- Evaluated applications where SSO was not feasible and documented them as SSO Not Applicable, routing them to Risk Registry or initiating retirement/cancellation requests through ServiceNow when required.
- Tracked and monitored EPRID onboarding progress using SharePoint and ServiceNow, ensuring all new applications initiated the SSO integration process.
- Performed end-to-end troubleshooting with application teams during SSO integrations involving SAML, OAuth, and OIDC protocols.
- Validated EPRID status before closure, categorizing them as SSO Enabled, SSO Not Enabled, SSO Not Applicable, or SSO Onboarding In-Progress.
- Generated weekly project status reports by consolidating data from CMDB, SharePoint, and ServiceNow, highlighting SSO onboarding progress, incidents handled, and risk registry updates.
- Presented weekly progress reports to leadership teams from HCLTech and HP, demonstrating project milestones, onboarding statistics, and operational performance.
Software Engineer
Prodapt
Bangalore, Karnataka
06.2021 - 08.2025
- Design, implement, and maintain Single Sign-On (SSO) solutions using Ping Federate, ensuring seamless authentication and authorization across internal and external applications.
- Configure and customize SSO connectors for various applications, supporting authentication protocols such as OAuth 2.0, SAML 2.0, and Open Token.
- Collaborate with cross-functional teams to gather requirements, analyze integration needs, and architect SSO solutions that meet business objectives.
- Troubleshoot and resolve issues related to IAM systems, including authentication failures, access provisioning errors, and identity synchronization issues.
- Utilize SailPoint technologies for managing user lifecycle, including provisioning, authentication, and authorization processes.
- Work on PingID and PingOne solutions for multi-factor authentication (MFA) and adaptive authentication to enhance security controls and user experience.
- Participate in vulnerability assessment and resolution activities to identify and mitigate security risks across the organization's IT infrastructure.
- Utilize Azure DevOps for continuous integration and deployment (CI/CD) pipelines, ensuring efficient and automated deployment of code changes.
- Worked within an Agile framework, participating in sprint planning, daily stand-ups, and retrospectives to deliver high-quality solutions in a timely manner.
- Document IAM configurations, procedures, and security controls, ensuring alignment with regulatory standards and internal policies.
Education
B.Tech/B.E. - Computer Science & Engineering
Brindavan College of Engineering (VTU)
Bangalore, Karnataka 08.2017 - 07.2021
Skills
- IAM (Identity and access Management)
- Ping Federate
- PingOne
- PingID
- Okta
- Sail Point
- SSO Authentication Protocols
- OAuth 20
- Saml
- OIDC
- Python
- Java
- Oracle Database
- Shell Scripting
- Security and Vulnerability Management
- Continuous Integration/Continuous Delivery (CI/CD): Git
- Agile Framework
- Process Development
- Work Planning and Prioritization
- Reporting efficiency and accuracy
Languages
Hindi
First Language
English
Proficient (C2)
C2
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Work Preference
Work Type
Full TimeLocation Preference
On-SiteRemoteHybridImportant To Me
Company CultureWork-life balanceCareer advancementTeam Building / Company RetreatsPersonal development programsHealthcare benefitsTimeline
Senior Specialist
HCL Tech
09.2025 - Current
Software Engineer
Prodapt
06.2021 - 08.2025
B.Tech/B.E. - Computer Science & Engineering
Brindavan College of Engineering (VTU)
08.2017 - 07.2021