Services: Renovation of Web Security for existing
and new applications (ASP.NET on IIS)

• OWASP Top 10 Development
  Guidelines
• E2E security architecture for 3 tier
  applications
• Exchange of authentication platform
• SSO design
• Security middleware engineer for MQ, HSM platform, IIS, Filetransfer

Federated authentication for payment
network platform (Swift)

• Wrote technical architecture for Swift Browse federation connectivity
• Product specification for home grown Security Service (Microsoft Custom STS)
• Project Management up to production
  integration
• Wrote and implemented technical architecture for Transaction Signing Federation Service endpoint for 3 rd party Cloud Services and internal applications
• Integration of Federation Architecture for cloud services such SalesForce and Oracle eBusiness systems
• 2nd phase integration of internal applications into federation model
• Definition and Documentation of Technical E2E Security Architecture
• Integration of Identity Management
  platform

IIS 7.5, ASP.NET, MVC3, JQuery, JSON, .NET Framework 4.0, 4.5 WCF, ADFS 2.0, WIF, Tomcat, Shibboleth (mod_shib2), Component Space, SAML1.1,SAML2, Microsoft WIF, WS-Security, WS-Federation, Active Directory

Services: Review of current WAS 6.1 Technical Architecture. Provided Technical Architecture and Guidance to project- and
infrastructure teams including:

• Cell- and High Availability Setup
• Gap analysis of Infrastructure (Documentation, Configuration, Configuration Management)
• Development Guidelines and Development Documentations (e.g. Coding Standards, Naming Standards)
• Security Review and Setup
• Implementation of Custom Password Encryption Plug-in
• Disaster Recovery Concept
• Team Management Infrastructure and Guidance
• Perl Scripting, Monitoring Support
• Application Support, Troubleshooting

X-Net Portal -

• Corrected various architecture decisions
• Guidance of Technical Architect
• Guidance of IT Security organization regarding Web Security Requirements
• Support SSO Project to WebSphere Portal Server and WAS 6.1 including TAMeB 7.0 POC
• WebSphere 7.0 Security Engineering
• WPS 6.1 Security Engineering
• Kerberos Sign-on to Citrix Applicationset

IBM WebSphere Application Server 6.0.2, 6.1, 7.0
WebSphere Portal Server 6

Services: Web Security for Microsoft-based Web 2.0
Application

• Development of POC application
• Verification of Security Requirements and OWASP Top 10 against Microsoft Product stack
• Application of Security Requirements using MS APIs (VB.NET, MVC3, IIS configuration)
• Documentation of Technical E2E Security Architecture
• Security Design of Strong Authentication and Web Transaction Verification
• Lead architect for Technical Architecture for Federation Platform. Product engineering ADFS 2.0, WIF
  3.5, 4.5, .NET 4.5, SAML2P and WS Federation protocols including Federation Broker approach

IIS 7.5, ASP.NET, MVC3, JQuery, JSON,
.NET Framework 4.0, 4.5, WCF, ADFS, WIF

Services: Development and Maintenance of Java
Frameworks including:

• Development of HTTP Resource Adapter
• Java Security Frameworks
• Integration of Swift standards
• Migration to WAS 7
• PKI Services
• Production support, Troubleshooting

WebServices Security Architect, IBM WebSphere Application
Server 6.1, 7.0

Services: Review of current WAS 6.1 Technical Architecture, Application and Security Architecture for electronic voting hub
application:

• Review of existing architecture
• Redesign for SSO across various security domains
• Technical Security Architecture Documentation, current- and redesigned target architecture

IBM WebSphere Application Server 6.1
Tivoli Access Manager 6.1

Services: WebSphere Security Frameworks
Development including:

• Basic security of a WAS 6 based infrastructure
• WAS 6.1 Security Enablement
• WebServices Security
• PKI
• Apache Commons HTTPS Client
• WebServices XML Crypto
• CICS JCA Resource Adapter
• CICS Transaction Gateway
• CICS Security
• SAML SSO
• WS-Trust, WS-Federation
• WebSphere TAI and LoginModules
• Design and implementation of WAS Authentication Server (WebServices based)
• Development of PKI scripts and PKI procedure
• Documentation Work
• Non Repudiation using Signature Verification within Vordel Validation Engine
• WebServices Development
• Java Obfuscation
• Java Development (Resource Adapter,WebServices, JUnit Tests)

Middleware Technology Review - assessment of Customer’s cross division IT systems including:

• MQ, DB/2, Application Server, .NET, Directory Services, Mainframe Middleware
• Assessment and Roadmap

IBM WebSphere Application Server 6.0.2, 6.1, 7.0
WebServices Security OASIS1.1 WS-Federation, WS-Trust, SAML WebSphere Authentiation Server, Active Directory, Active Directory Application Mode (ADAM), AIX Security, Apache 2.0, XML Security, Java WebStart
Active Directory / ADAM, PKI, CICS Transaction Gateway
CICS Transaction Server, RACF, Maven, Eclipse 3.3 – 3.6
Vordel 4, 5

Services: Security Audits on behalf of the company
for various customer sites connecting to the application system (MQ and Browser based channel)

Services: Provided Technical Security Architecture
and Security Requirements for targeted J2EE- and WebSphere based System platform for a Single Settlement Engine including:

• Basic security of a WAS 6 based infrastructure
• Fat Java Client Application
• WebServices
• PKI
• CICS JCA Resource Adapter
• CICS Transaction Gateway
• CICS Security
• MQ Security
• DB/2 Security

E2E Security Architecture including

• Fat Java Client Architecture
• WebServices Middle Tier
• CICS TG backend integration
• CICS and RACF Security
• CICS TG backend integration
• SAML SSO
• WS-Trust, WS-Federation

Engineering of WAS 6 including

• Configuration Management
• Admin Scripting (JACL)
• Security Enablement
• PKI implementation, Scripting
• SSO enablement
• WebServices Authentication POC

WebSphere Frameworks Development

• WebSphere TAI and LoginModules
• Design and implementation of WAS Authentication Server (WebServices based)
• Development of PKI scripts and PKI procedure

XML Security Appliance Evaluation and Testing

• Datapower, Vordel, Forum Sentry
• Apache mod_security

Security Standardization – Major support for IT Security Architecture Department in standardization Security Policies for

• RACF
• Active Directory, Active Directory Application Mode (ADAM)
• CICS Transaction Server, CTG, CPSM
• AIX Security
• DB/2 Security
• Web- and Application Servers,
• MQ Security

IBM WebSphere Application Server 6.0.2, IBM DataPower XI50, WebServices Security OASIS1.1, WS-Federation, WS-Trust, SAML, WebSphere Authentiation Server
Active Directory, Active Directory Application Mode (ADAM), AIX Security, Apache 2.0 XML Security, Java WebStart, Active Directory / ADAM, PKI, CICS Transaction Gateway, CICS Transaction Server, RACF

Services: Provided Target Architecture for Portal 6
Infrastructure. Installation and Configuration of WebSphere 6, Portal 6, TAM 6. Engineering and Setup of target Infrastructure.