Enterprise Identity & Access Management Platform
Designed and led an enterprise IAM platform with unified SSO across multi-tenant SaaS products. Integrated OAuth2/OIDC and SAML authentication flows, implemented AWS Cognito as a federated IDP, and added TOTP-based MFA for enhanced security. Delivered secure partner connectivity through AWS VPC Peering, routed private assets via S3 VPC endpoints, and built an event-driven audit/compliance pipeline using Apache Kafka, SNS, and SQS for reliable asynchronous processing.