Combining my data, security, and AI skills to uplevel one of the world's largest cloud services (Entra Id Identity Token Provider) that handles ~2.4 billion requests per month for a convergence project unifying all Interactive Auth Flows into a single Platform (code-named: Sangam). Here, I will be getting my first large-scale backend service product experience. Requirements are highly secure and reliable to handle 10B Mau.
Continuing at Identity Security preventing Threat Actors from entering Identity, Microsoft's first line of defense. Blocked human touches to secrets to prevent leakage of credentials outside of the boundary across Microsoft for our cloud foundational secret store. Became an expert Security Data Synthesizer including but not limited to Layers of Defense needed for critical assets in IDNA. Provides a framework for defense in depth across IDNA org and rest of company. Also became an expert in protections and preventions of novel breaches. Towards the end of my journey in the central Identity Security team, I recently played around with merging the data and security space with AI architecting and POC'ing components for a Scalable Autonomous Risk Identification Engine.
Joined the Microsoft Security Organization working with the Identity and Network Access (IDNA) Identity Security SPADE (Security Protection and Defensive Engineering) team. Evolved a telemetry scanner for cred leaks into a mini Service for the whole IDNA org Services to scan and detect cred leaks at scale securely. Caught 43k CredLeaks across org in a couple of months timeframe. Drove security of IDNA Service’s machine node dumps to remove leakage of critical secrets and keys. Drove across Microsoft company-wide campaigns to burn down cross-boundary traversal top risks for 767 cloud foundational App Identities and won an IDNA Org-level quarterly award for World Class Quality and Customer Experience for my e2e risk reduction in safe manner.
Deployed Xage's Blockchain-based Product on Azure and published it to the Azure MarketPlace using Azure Resource Manager Templates/provisioning state scripts, Documenting APIs using the Swagger API Documentation tool and wrote automated testing suite for APIs in Python simultaneously, Tested User Login Credentials using Selenium, Improved validation and error handling for APIs in Golang
