Work That Matters

🎯 Problem

Government social insurance platform needed secure, seamless digital identity for millions of citizens, integrated with the Saudi national identity system (Nafath).

💡 Solution

• Designed and delivered CIAM platform on ForgeRock AM/IDM/IG + Ping Identity
• Built passwordless & adaptive authentication journeys (HOTP, Push MFA, Face ID/Touch ID, biometrics, step-up auth)
• Established SSO + federation across web, mobile, and device apps via SAML, OAuth 2.0, OpenID Connect
• Integrated with Nafath national identity provider for compliant onboarding
• Implemented UMA-based fine-grained authorization for high-risk operations
• Connected to Splunk SIEM for centralized identity threat monitoring
• Designed HA/clustering architecture for large-scale citizen user population

🛠️ Technologies

🎯 Problem

Siloed legacy systems, insecure API exposure, and lack of centralized integration governance across the enterprise.

💡 Solution

• Architected enterprise API management layer using Apigee (Google Cloud) and Oracle Service Bus
• Designed traffic management, throttling, and API security policies
• Built microservices backbone in Java / Spring Boot for citizen-facing services
• Containerized workloads on Red Hat OpenShift (Kubernetes)
• Implemented CI/CD pipelines via GitLab CI/CD and Jenkins
• Integrated messaging (RabbitMQ) for async event-driven communication

🛠️ Technologies

🎯 Problem

A large government services platform managing citizen data for 2M+ users had no centralized identity governance, creating compliance risk and manual overhead.

💡 Solution

• Architected SailPoint IdentityIQ implementation for the full citizen identity lifecycle
• Designed RBAC + ABAC models for least-privilege access
• Automated access certification campaigns → 60% reduction in manual review effort
• Integrated SailPoint with NAFATH and enterprise SSO (Keycloak / Red Hat SSO)
• Applied Zero Trust principles at the identity and data access layer

🛠️ Technologies

🎯 Problem

A financial software platform (EVOLV suite) required identity governance and access controls meeting SOX compliance for financial data protection.

💡 Solution

• Designed and implemented SailPoint IdentityIQ for financial platform
• Built RBAC framework aligned to SOX requirements
• Developed custom connectors for automated provisioning
• Implemented SAML 2.0 federation for secure partner access
• Achieved 100% compliance rate across financial industry audit cycles

🛠️ Technologies

🎯 Problem

High-volume government services (traffic violations, vehicle transfer, payment workflows) required robust integration architecture.

💡 Solution

• Built integration solution using Java EE and IBM WebSphere
• Implemented API gateway policies with IBM DataPower
• Designed observability stack with Prometheus and Grafana
• Ensured high availability for critical government services

🛠️ Technologies