University of Maryland

Staff Security Engineer (IAM) @ Oscar Health

Receive

Head of Engineering

Throughout my time at Brex, I leveraged my experience in system design and implementation to build solutions for our external customers to simplify the management of their finances and improve internal operational efficiency to support our customers needs. 

Select project work:
• Led the backend engineering efforts in the design and implementation of a high impact feature to enable customers to set and enforce custom multi-step admin approval policies for outbound transactions
• Identified a critical gap in the customer billing program’s strategy regarding the management, tracking, and retention of customer contract commercial terms. Documented requirements and designed a solution which became a core component of the program and resulted in the identification of unexpected non-standard contract terms, missing contracts, and billing errors
• Designed and built the automation and integration of the contract management service and customer usage metrics with the third party billing system to reduce the risk of operational errors and enable billing operations to scale with customer growth
• Developed solution to streamline the movement of customer funds from MMF to FDIC accounts to reduce the fraud team’s operational overhead during offboarding of high risk customers
• Created and managed Service Level Objectives to identify potential issues early

In addition to my project work:
• Actively participated in internal and external customer calls to ensure product feature iterations met customer needs
• Mentored and coached a summer intern in selecting an impactful summer project and guided them to be able to deliver early and focus on stretch goals. They received an ‘exceeds expectations’ rating for their work and accepted a full time offer

Brex

Senior Software Engineer

Throughout my time at Oscar, I helped grow the Security team from a team of 2 individuals to roughly 20 by my departure. I managed and mentored junior team members with a lead by example approach, being very hands on in our numerous development and technical system POCs and deployments. I wrote services in Golang, Python, React, and Bash using technologies such as gRPC & Protobufs, and Postgres databases, and ran these services in Mesos via Aurora. In addition, I partnered with our SRE and infrastructure teams to help improve our AWS and GCP infrastructure and contributed to our Ansible and Terraform repositories.

Oscar Health

Staff Security Engineer (IAM)

Define key areas of focus and roadmap for technical and non-technical efforts
Design, build, and maintain MVPs for:
• Customer facing mobile app
• User account management web app
• Internally facing web apps to manage member data and internal taxonomy data
• Several serverless functions for business process automation
Drive member acquisition and expand partnership opportunities

Manor

Co-founder & CTO

• Managed a team of engineers, including mentoring junior team members and fostering a team culture that thrived on transparency, support, and development, while ensuring deliverables were on track and milestones met
• As primary technical security liaison, instituted changes to improve cross-team collaboration to ensure alignment and facilitation of organizational efforts in line with security policies
• Built out a separate AWS environment for the Security team to test systems and build out security focused solutions
• Led proof of concept and rolled out an identity management platform to manage/run organization wide access reviews and successfully ran large scale reviews across critical infrastructure under short and rigid deadlines
• Designed and led the implementation of IAM processes, procedures, and infrastructure
• Designed and built a gRPC based solution to properly abstract the identity management system and simplify and streamline user access reviews
• Ran POC and deployed an improved data loss prevention and encryption system for email

Sr Security Engineer: IAM Lead

• Consolidated the internally focused IAM solutions saving nearly $80k a year and simplifying operational overhead
• Developing a service for monitoring user endpoints that are non-compliant with security policies
• Developed service for monitoring the network infrastructure to detect rogue devices
• Developed and refined scripts and implemented procedures to streamline and improve the employee onboarding and offboarding process
• Designed and developed numerous services to streamline partner teams’ manual processes

Security Engineer II: IAM Lead

Technical Delivery Lead (Global Products Firm)
• Designed and architected a new customer facing IAM landscape
• Led a team in the rollout and implementation of the IAM environment
• Developed IAM wrapper service to simplify integration for partners
• Developed automated process for deployment of custom built containers for each piece of the IAM landscape

Accenture

Security Consulting Manager

Technical Delivery Lead (Global Education Firm)
• Designed, architected and deployed a centralized authorization environment for customer facing applications to perform real-time attribute based authorization
• Developed custom automated deployment scripts for the setup and installation of the entire authorization stack (software and IaaS hardware)
• Set strategic standards to ensure the successful integration and support of the authorization solution
• Conducted a pilot for the authorization solution

Global IAM Workstream Lead (Global Financial Services Firm)
• Developed metrics and reporting success factors for firmwide adoption of identity and access management of high risk privileged applications, infrastructure, and accounts
• Analyzed application and infrastructure ecosystem data to identify onboarding and compliance enhancement opportunities and forecast program costs and timeline
• Developed program success plan based on data analysis that was communicated with key stakeholders including business CIOs, global C-Suite, and Board Audit Committee

IAMaaS and Security Technical Expert, Security Software Developer (Whitelabel For Okta)
• Worked as a member of an IAMaaS’ Professional Services team to architect and assist mid to large client with their integrations
• Designed and developed Spring MVC based RESTful service as a business logic layer and proxy to the backend IAMaaS solution

IAMaaS and Security Technical Expert, Security Software Developer (Major Utility Company)
• Architected and implemented a homegrown customer portal for 1.6MM end-users to integrate with Okta and support customer registration, profile management, federation with third party vendors, CRM 7 integration, and SAP integration
• Designed and developed a customer service representative solution, following hybrid IAM model, integrating enterprise AD with Okta

Technology Consultant

IAM Strategy and Solution Specialist (Major Utility Company)
• Identified requirements for an IAM vendor proof of concept and coordinated the request for proposal process
• Assisted in running the proof of concept and selection process to determine the appropriate tool for an intricate and highly customized environment


PAM Strategy and Implementation Specialist (Global Financial Services Firm)
• Onboarded high risk applications to a privileged access management tool
• Documented current processes surrounding privileged access management and made recommendations for technical and operational improvements

IAM Strategy and Solution Specialist (Large US Regional Bank)
• Ran workshops to assess and document the client’s current state IAM infrastructure
• Proposed upgrades to help improve IAM security and long term security architecture

IAM Strategy and Solution Specialist (Global Financial Services Firm)
• Identified requirements for an IAM vendor proof of concept
• Assisted in running the proof of concept and the selection process to determine which tool could fit into an intricate and highly customized environment
• Coordinated proof of concept execution with the vendor and client and resolved issues that arose

Access Review Onboarding Lead – Entitlements and Role Engineer (Global Financial Services Firm)
• Managed the pipeline of high risk, SOX, and Fed impact applications required to be onboarded to the access review tool
• Worked with business unit leads and technology teams to determine patterns, prioritization, and work effort for integration

Technology Consulting Analyst

• Developed a service for validating government documents meet confidentiality requirements
• Intern Team Project: designed and developed a service to monitor for global network outages in near real time and overlay on a map (Placed 1st for the intern team project competition)

Booz Allen Hamilton

Cyber Security Summer Intern

• Intern Project: designed and developed internal acronym dictionary in PHP

Network Solutions

Summer Intern

• Configured employee desktops
• Set up hardware and software for employee workstations
• Attended to hardware and software tickets

Ilan Rasekh