Bipin Jaiswal

Enphase Public Key Infrastructure (EnPKI)

• Designed and implemented an enterprise-grade, in-house PKI solution to secure communication between Enphase devices and cloud infrastructure, enabling protected channels for critical operations such as reporting, metrics publishing, and firmware upgrades.
• Developed comprehensive certificate management capabilities, including issuance and revocation, with full lifecycle management, forming the foundation of the company's zero-trust security model.
• Extended the EnPKI security framework to secure communications between various public grid services (SAPN, PPL, United Energy, POWERCOR, AUSNET, Jemena, etc.) and Enphase devices, strengthening infrastructure security against potential attacks.
• Scaled the PKI infrastructure to issue and manage certificates for over 10 million devices, demonstrating technical expertise in large-scale security implementations.
• Secured MQTT and HTTP communication across Enphase devices, ensuring data integrity and confidentiality.
• Skills : CDN, Load Balancer, EC2, API Gateway, S3, Lambda, AWS KMS, CloudHSM, Cognito, Secrets Manager, IAM, RDS, Redis Cache, PostgreSQL, REST, Microservices, Java, Spring Boot, JPA

Code/Software Signing

• Developed and implemented a secure system to digitally sign firmware packages before deployment, ensuring authenticity, integrity, and protection against tampering.
• Created a robust verification mechanism to enforce that only Enphase-signed packages are deployed on devices, enhancing trust and minimizing deployment risks.
• Integrated the system with CI/CD pipelines, enforcing stage-based approvals and enabling real-time status tracking via APIs and webhooks, streamlining the deployment process.
• Skills : SQS, Camunda, AWS KMS, CloudHSM, Java, Spring Boot, JPA

Device Provisioning

• Designed and developed a secure, fault-tolerant device provisioning system to onboard devices to the Enphase Cloud, ensuring seamless integration and scalability.
• Automated the delivery of birth and operation certificates to devices, enabling secure registration and communication through IoT Core.
• Ensured uniqueness and integrity of certificates across the system, maintaining robust security and resilience in large-scale deployments.
• Skills : IoT Core, MQTT, mTLS, Java, Spring Boot, JPA

Enphase SSO

• Built a SAML 2.0 Identity Provider (IDP) to enable seamless Single Sign-On (SSO) across multiple applications, improving security and user experience.
• Integrated multiple service providers, eliminating the need for multiple logins and simplifying authentication management.
• Skills : SAML, Java, Spring Boot, MongoDB, mySQL