Sasikumar CHENNIYAPPAN
Sydney,NSW
Summary
Dynamic CIAM Specialistwith 18+ years at Optus Business, specializing in Identity & Access Management (IAM) and API Security. Proven track record in designing risk-based IDV platforms and orchestrating secure, scalable solutions. Adept at stakeholder engagement and regulatory compliance, driving significant improvements in security architecture and fraud detection.
Overview
19
19
years of professional experience
Work History
Lead Architect, IDM
Optus Business
2023.06 - Current
- 18+ years delivering security and identity architecture across large, regulated enterprises.
- Designed vendor-agnostic, risk-based IDV platforms supporting digital, partner, chatbot, and retail onboarding.
- Orchestrated BPMN-based verification journeys with biometrics, liveness, document checks, and manual review.
- Led DAON IDV solution architecture and integration, including OCR, biometric matching, and fraud signals.
- Implemented OAuth 2.0 CIBA flows to decouple authentication from identity proofing.
- Established enterprise API security using Apigee with zero-trust access patterns.
- Integrated AWS microservices, Kafka pipelines, monitoring, and SIEM/SOC workflows for real-time fraud detection and incident response.
- Led security architecture reviews and regulatory compliance assurance, embedding privacy-by-design controls.
Senior Application Architect
Optus Business
2021.09 - 2023.06
- Led architectural vision and delivery of major Optus initiatives (Living Network, Optus Pulse, Carbon Offset, Call Translate) with on-time delivery and strong executive recognition.
- Designed secure, scalable platforms using Apigee, IAM, API security, data security, and Node.js microservices.
- Architected real-time data ingestion and processing pipelines to generate actionable customer insights.
- Delivered end-to-end architecture for digital carbon offset calculation and reporting platforms across Australia.
- Drove cloud adoption strategies improving scalability while achieving significant cost efficiencies.
- Standardised API lifecycle and CI/CD pipelines, enabling automated testing, versioning, and deployments.
- Integrated multiple third-party APIs with strong governance, reliability, and interoperability standards.
- Improved developer productivity through automation, monitoring dashboards, and operational observability.
Senior Software Engineer
HCL Technologies
2020.07 - 2021.05
- Led design, build, and operations of IAM platform for a national-scale COVID-19 application supporting ServiceNSW.
- Defined access models, roles, and entitlements for healthcare, government agencies, and public users.
- Implemented Azure AD, OAuth 2.0, SAML, and MFA for secure and seamless authentication.
- Enforced RBAC and least-privilege principles to protect sensitive health and identity data.
- Managed identity lifecycle processes including provisioning, de-provisioning, and audit logging.
- Acted as single point of accountability for identity incidents, scaling, and enhancements during peak demand.
- Ensured compliance with ISO 27001 and Australian Privacy Principles (APPs) in a regulated environment.
- Partnered with cybersecurity, infrastructure, and delivery teams to embed security across the platform.
Technical Lead-IDAM
IDAM Development, Optus Australia
2014.03 - 2020.06
- Led Apigee platform build and implemented OAuth 2.0, OIDC, and SAML federation for enterprise authentication and authorisation.
- Delivered cloud migration of IDAM platforms, migrating policy controls with zero end-user impact.
- Built custom authorisation server on Google SaaS, enabling hybrid cloud/on-prem authentication models.
- Designed IAM solutions using CA SiteMinder, Federation Manager, and IdentityMinder, including upgrades and platform hardening.
- Developed custom authentication modules and backend Java/SOAP services supporting customer identity lifecycle.
- Implemented SSO across multiple enterprise environments and integrated with OIM, OID, OIA, and OAM.
- Established enterprise security policies within SDLC and enforced secure deployment practices.
- Led delivery teams and coordinated with QA, DevOps, and Support to deliver secure platforms on time and at scale.
IDM Developer
AMP Limited
2013.09 - 2014.08
- Architected and implemented IAM framework for mobile applications, covering requirements, design, and deployment.
- Delivered federated Single Sign-On (SSO) across two mobile platforms using identity federation patterns.
- Integrated IBM Tivoli Access Manager (TAM) and Directory Integrator (TDI) to establish a unified identity platform.
- Implemented federation using IBM Tivoli Federated Identity Manager (TFIM) for secure cross-system authentication.
- Developed Java web services and SQL-based enhancements to optimise IAM performance and reliability.
- Executed complex identity data migrations using TDI and Tivoli Directory Server (TDS) with high data integrity.
- Rapidly adopted new technologies to drive continuous platform improvement and delivery efficiency.
Security System Administrator + Consultant
Woolworths Group
2012.12 - 2013.09
- Managed security for 7,000+ end-user devices, ensuring compliance with enterprise security standards.
- Implemented BitLocker full-disk encryption for employees and contractors to protect sensitive data.
- Administered McAfee ePO, DLP, PKI, and endpoint protection, including patching and threat response.
- Controlled user access rights and device policies to enforce least-privilege and data protection.
- Managed onboarding and offboarding processes, ensuring secure provisioning and de-provisioning.
- Delivered secure hardware and software provisioning aligned to corporate security policies.
- Created operational documentation and runbooks, improving troubleshooting and incident resolution.
- Provided security consulting and technical training to support adoption of new technologies.
Consultant
ABS
2012.09 - 2012.12
- Delivered IAM migration from legacy systems to Oracle Identity Management Suite (OID, OAM, OIA, OIM 11g) for national-scale organisations.
- Enabled seamless SSO and federation across enterprise applications using centralised identity and policy controls.
- Performed integration testing and production support across Apache, WebLogic 11g, and Oracle IAM stack.
- Implemented CA SiteMinder–based custom authentication and authorisation solutions for customer identity use cases.
- Developed server-side Java web services for identity lifecycle and access enforcement.
- Administered security policies bound to user identity for authentication, authorisation, and auditing (AAA).
- Acted as security system administrator and IAM consultant, supporting offshore delivery and incident resolution.
- Worked within a 5-member Customer Identity team, supporting high-availability enterprise platforms.
Senior Software Engineer
Wipro Technologies
2012.02 - 2012.06
- Specialised in IAM solutions for banking and financial services environments.
- Implemented CA Single Sign-On (SiteMinder) and RSA SecurID for strong authentication and SSO.
- Designed and supported JPMC EAST SiteMinder architecture, including Policy Servers and Web Agents.
- Developed and integrated IAM components using IBM Rational Developer and Eclipse.
- Configured and administered IBM WebSphere 7.x and Microsoft IIS 6.0 for secure application hosting.
- Managed LDAP directories (SunONE) and MS SQL Server for identity data and application integration.
- Used SVN and CVS for source control and release management.
- Supported deployments across Windows, Solaris (SPARC), and Linux/Unix platforms.
Associate
JPMorgan Services India Pvt Ltd
2010.07 - 2012.02
- Provide Single Sign On solution for all JPMC internal applications (APAC, EMEA & AMER data center hosted applications)
- Create and manage enterprise security policies in regards to Authentication & Authorization for firm-wide web applications in various SDLC environments (Dev, QA & PROD)
- Manage IAM infrastructure (Certificate renewal, cluster setup (multi-data center hosted), Loadbalancer & Failover server maintenance)
- Managing Apache Webserver, SiteMinder Web Agent & RSA SecurID
- Increased customer satisfaction by resolving complex issues and providing exceptional service at all times.
- Streamlined inventory management processes, reducing waste and ensuring optimal stock levels were maintained.
Software Engineer
Mphasis, HP Company India & US
2006.12 - 2010.05
- Consistently met project deadlines by effectively managing time and prioritizing tasks according to importance.
- Developed applications utilizing Spring Framework, web services, and web-based UI technologies.
- Created reports using Actuate tools, focusing on analysis and design.
- Implemented efficient Java solutions with Servlets, JSP, and JDBC for improved performance.
- Analyzed proposed technical solutions based on customer requirements.
- Developed scalable and maintainable code, ensuring long-term stability of the software.
- Collaborated with management, internal and development partners regarding software application design status and project progress.
Education
Master of Science - Software Systems
BITS Pilani
BITS Pilani, Rajasthan, INDIA11.2010
GED -
Anna University
Anna University, Chennai05.2005
Skills
- Identity & Access Management (IAM), CIAM, Identity Verification (IDV)
- OAuth 20, OpenID Connect (OIDC), SAML, FIDO2/Passkeys, MFA
- API Security & API Management (Apigee)
- Biometric Verification, Liveness Detection, Fraud Controls
- AWS Cloud Architecture & Hybrid Integration
- Microservices & Event-Driven Architecture (Kafka)
- Data Security: PKI, Encryption, Key Management
- Security Architecture, Zero Trust, Defence in Depth
- BPMN Process Modelling & Risk-Based Orchestration
- Java, Nodejs, REST/SOAP Integration
- Vendor Platforms: Okta, DAON, CA SiteMinder, IBM Tivoli, RSA
- Stakeholder Engagement, Architecture Reviews, Regulatory Compliance
Accomplishments
- Designed and led the end-to-end architecture of a next-gen, vendor-agnostic Identity Verification (IDV) platform leveraging OAuth 2.0 CIBA, enabling secure, seamless customer onboarding across both digital and assisted channels.
- Digital Integration Governance Spearheaded key pillars of digital transformation by defining enterprise IAM policies, establishing a scalable developer portal for internal/external integrations, and enforcing API standards and protection mechanisms to ensure secure, consistent, and developer-friendly service consumption.
- Pioneered the integration of APIGEE-based agent-assisted verification flows, significantly improving verification efficiency and reducing support team effort.
- Led multi-vendor technical evaluations through deep-dive workshops, comparative analysis, and risk assessments, resulting in the selection of a scalable, secure IDV solution aligned with enterprise strategy.
- Presented architectural solutions and technical proposals to diverse stakeholder groups across Australia and Singapore, gaining cross-border buy-in for strategic digital identity initiatives.
- Addressed critical security challenges in Mobile Customer ID (MCID) deployments including encryption, key rollover, and implementation of robust incident investigation standards.
- Digitized manual customer verification processes by enabling integration with retail POS systems, online portals, and self-service tools — boosting onboarding efficiency and reducing verification time.
- Mitigated project delivery risks by embedding security and compliance into the solution lifecycle, and conducting proactive risk assessments across all phases of implementation.
- Mentored cross-functional teams, fostering internal capability growth in IAM technologies and solution design, while cultivating a high-performance, knowledge-sharing environment.
- Drove innovation and cost-efficiency through value engineering practices that balanced cutting-edge design with operational and financial sustainability.
- Embedded sustainability principles into platform development by advocating green IT approaches, including scalable cloud-native design and energy-efficient technology adoption.
- Diaster recovery Test fail-over strategy planning & DR tested conducted as per schedule.
- AI-Driven Enhancements Explored AI integration opportunities across identity verification and API analytics, leveraging ML models for anomaly detection, usage prediction, and adaptive policy enforcement.
Personal Information
- Visa: Permanent Resident
- Date of Birth: 05/15/83
- Nationality: Indian
- Marital Status: Married
Certifications Awards
- Certified AWS Solution Architect
- CyberSecurity Certified Professional
- Proven Professional, CA SSO 12.x Implementation Certified
- Awarded for Best Performer of the year during 2015-2016.
- Certified in Solaris 10 Operating System from Sun Authorized Center
- Certified by CA as centre of excellence (COE).
Icon
https://www.myperfectresume.com/config/icons/general-14-white.svg
References
Ashwini Cuppu, Snr Mgr, DPM - Digital Identity
Naveen Tirumala Kanduri, Senior Delivery Manager
Paresh Degamwala, Associate Director
Suhas Kulkarni, IDM Architect.
References
References available upon request.
Timeline
Lead Architect, IDM
Optus Business
2023.06 - Current
Senior Application Architect
Optus Business
2021.09 - 2023.06
Senior Software Engineer
HCL Technologies
2020.07 - 2021.05
Technical Lead-IDAM
IDAM Development, Optus Australia
2014.03 - 2020.06
IDM Developer
AMP Limited
2013.09 - 2014.08
Security System Administrator + Consultant
Woolworths Group
2012.12 - 2013.09
Consultant
ABS
2012.09 - 2012.12
Senior Software Engineer
Wipro Technologies
2012.02 - 2012.06
Associate
JPMorgan Services India Pvt Ltd
2010.07 - 2012.02
Software Engineer
Mphasis, HP Company India & US
2006.12 - 2010.05
Master of Science - Software Systems
BITS Pilani
GED -
Anna University