Srinivas Ponnamanda

Experience

• 

  Tenet Healthcare

  Jan 2003 - Dec 2004

  Software Engineer

  • Contributed to understanding of the existing systems and involved in the analysis of the requirements • Developed the modules for data validation, transaction file and master file updating• Involved in conversion of COBOL programs into RPG and Developed the RPGLE modules using Embedded SQL • Functional & Technical specification and Test plans preparation.• Involved in System Integration Testing (SIT) Support and Data Analysis.• Designed use case, class and sequence diagrams using Rational Rose tool.• Designed and Developed HTML pages and JSP pages.• Performed client side validations using JavaScript and server side validations using Struts.• Created and configured struts-config.xml file to manage control flow.• Developed Session and Entity Beans at the middle tier for business transactions, fetching analytical results from Analytic Engine and implementing business rules. Show less

• 

  HSBC

  Jan 2005 - Aug 2006

  Sr Softwate Engineer
• 

  NAVY EXCHANGE SERVICE COMMAND (NEXCOM)

  Oct 2006 - Jul 2007

  Information Security Engineer

  Implemented the project for US navy on vulnerability management of major server and mainframe infrastructures, network content monitoring , intrusion detection upgrade, PKI deployment, manage development of a corporate data retention program, and coordinate the executive protection program – resulting in an untarnished record in protecting all personal consumer records of 280 million Americans.• Maintain intrusion detection system,Analyze alerts from IDS and other detection systems and Respond to any security incidents• Responsible for installation, configuration and maintenance of WebSphere Application Server (Base and ND), and WebSphere Portal Server in a heterogeneous environment.• Managed a team of 8 WebSphere engineers in a large scale project to Migrate WebSphere environment from AIX to Solaris which involved 50+ servers and 80+ J2EE applications.• Created WebSphere cells, Horizontal and Vertical application clusters, and added cluster members to clusters in effort to create fault-tolerant, scalable, and highly available WebSphere environment.• Installed Fixpacks, eFixes, and cumulative fixes to the existing infrastructure.• Installed and configured remote WebSphere plug-in for IBM HTTP Server. Manually updated plug-in files for IHS servers located in DMZ.• Developed technical standards, processes, procedures, and best practices to allow for auditable administration of WebSphere environment and applications.• Developed shell, JACL, and WSAdmin scripts in order to facilitate delegated WebSphere administrative task such as deployment of Enterprise applications, and configuration of JVM and other resources. Show less

• 

  Alltel Wireless

  Aug 2007 - Jun 2008

  DataPower Security Consultant

  • As an Lead and system designer my job role was to integrate new & existing enterprise applications with the Federated Identity Management & Access Management system• Responsible for installation, configuration of Tivoli Federated Identity Manager components federated single sign-on and Web services security management• Secured the Alltel Web services using WS- Security standard and SAML 1.0 protocol • Worked with various application team to modify their authentication module to consume SAML/TAM authenticated cookie • Deployed Webservice Authentication and Authorization using IBM Datapower and Tivoli Webseal • Performed initial network setup for new Data Power device (Configuring the device for access, Configure the Web Management interface and WebGUI Configuration)• Administered Websphere Datapower, major tasks include Firmware upgrade, creation of users, domain, assigning ACL and Export/Import the system configuration• Implemented and configured the integration of IBM DataPower appliances with IBM Tivoli Federated Identity Manager (TFIM) through the exchange of WS-Trust SOAP messages• Developed the XSLT for content based routing and Create a WS-Trust request security token message to contact TFIM• Implemented and configured the integration of IBM DataPower appliances with Tivoli Access Manager to allows a user to be authenticated using a simple user name and password • Implemented different Logging mechanisms like SYSLOG, SYSLOG-NG, SOAP, SNMP, and SMTP for creating Log Target object.• Involved and configured the Integrating DataPower with WebSphere Message Broker using the Broker with XML Firewall• Configured and implemented the various Multi-Protocol Gateway Service with different front-end and back-end protocols • Configured and developed the WS-Proxy Service with different WSDLs and Configured SSL and crypto objects(SSL proxy profile, crypto Profile, crypto key and crypto Certificate Show less

• 

  Ohio Department of Medicaid

  Jul 2008 - May 2012

  Independent Consultant / Information Security Admin

  • Member of Enterprise Information Security Team focused on a large scale Identity & Access Management project in a Service Oriented Architecture (SOA) utilizing the IBM Tivoli suite (TIM, TAMeb, TDI , and java based web services running on both Solaris & Windows platforms). • Implemented the Access and Identity Management solution for ODJFS Medicate Project. Responsibilities included business requirement analysis, development of technical architecture and solution design using IBM Tivoli Access Manager and IBM Tivoli Identity Manager products.• Implemented the central Identity management solution using ITIM adapters and Tivoli Directory Integrator (TDI) to multiple endpoints including Active Directory (AD), LDAP, Tivoli Access Manager (TAM COMBO), Database systems and Unix Server to provide a single sign-on system capable of Identity Management, Access Management of all customer online applications.• Lead the ODJFS Incident Response and Security Team to detect, prevent and analyze compromised systems Perform computer forensic analysis on compromised computer systems• Worked with management, technical experts, programmers, auditors, facilities, security operations and other personnel to identify exposures and implement security controls for data, applications, hardware, telecommunications and computer installations. Performed vulnerability assessments.• Periodically review Information Security Metrics and ensure compliance as well as assist with related Risk Mitigation efforts. Implemented Role Based Access Control Model for Enterprise Asset Management syste Show less

• 

  Motorists Mutual Insurance Company

  May 2012 - Aug 2013

  Tivoli Security Specialist

  • Played a lead role in Installation and configuration of Tivoli Identity and Access Manager Components such as DB2, Tivoli Directory Server (IDS),Web sphere Application server,TDI, ITIM Application, WebSEAL and Web Portal Manager • Played a key role in Tivoli Identity/Access Manager upgrade project from ITIM 4.6 to ITIM 5.1 and TAMeb 6.0 to TAMeb 6.1 • Lead implementation of IBM Tivoli Access Manager and Identity manager implementation to enable secure access to internal applications from the Internet. • Developed and configured automated processes, workflows, secure self-service and delegation functions to facilitate secure role-based access control to back-end resources and applications• Developed the TDI assembly lines to collect necessary person data form various authoritative person data sources (ADP, Wilson, AIMS ,Life and Iowa ) and consolidate it into a centralized database repository which is used to feed the IAM system(ITIM .ITAMeb)• Developed the TDI assembly lines to collect necessary person data form various authoritative person data sources (ADP, Wilson, AIMS ,Life and Iowa ) and consolidate it into a centralized database repository which is used to feed the IAM system(ITIM .ITAMeb)• Design and Developed the custom workflows and migrate custom FESI extensions to ITIM 5.1 JSengine by mentoring java developers on ITIM and TDI• Reconfigured ITIM’s identity policy to assign, system-generated account user IDs based on a random alpha character followed by a random 6-digit number• Integrated the motorists ADP system with ITIM to automatically provision the employees, Board Members and contractors into ITIM.• Design and Implemented the automated provisioning via Tivoli Identity Manager using adapters and Tivoli Directory Integrator (TDI) to multiple endpoints including Active Directory (AD), LDAP, Tivoli Access Manager(TAM COMBO), Lotus Notes and RACF. Show less

• 

  Horizon Blue Cross Blue Shield of New Jersey

  Jan 2013 - Sept 2013

  Information Security Specialist

  Played Key role in The BCBSNJ Web Access Management (WAM) project introduces the IAM solutions to meet the business requirements and also implemented new features in WAM project like Centralized user ID administration (provisioning),Workflow driven user ID creations and entitlements based on role memberships, Backend system integration for user information, Password management for end users and administration teams, Automation of user ID suspension/deletion and End user registration for access to portal resources Show less

• 

  The Ohio Department of Taxation

  Apr 2017 - now

  Tivoli Security Configuration and AdministrationLDAP Configuration and AdministrationWebsphere AdministrationIBM Cognos Installation ,Configuration and AdministrationIBM Infosphere DataStage Installation ,Configuration and AdministrationIBM WebSphere Enterprise Service Bus Installation ,Configuration and AdministrationImplemented the single sign-on (SSO) between Tivoli Access Manager WebSEAL and the PeopleSoft Web Application Server.Implemented the single sign-on (SSO) between Tivoli Access Manager WebSEAL and the IBM CognosInstallation , configuration and Administration of Oracle Public Sector Revenue Management (PSRM) 2.4 and 2.5 Show less

  • Infrastructure Specialist

    Sept 2013 - now

  • Infrastructure Specialist and DevOps Professional

    Apr 2017 - now