Ajai Joy

617-347-9021

ajai.joy@gmail.com

 

SUMMARY

·   Over 14 years of extensive experience in development of enterprise software spanning multiple domains hybrid clouds, data center automation, provisioning, identity management, fixed income securities and capital markets.

·   Demonstrated consistency year after year in leading software projects, productizing ideas with cross company alignment.

·   Hands-on, technical strategist, architect and implementer.

·   Full lifecycle of software development including working with product management requirements, design, development, testing, deployment, maintenance and support.

·   As an architect reviews the work of developers and subject matter experts, writes new positioning white papers, writes poc’s for new features and assembles the solution the components together in a way that addresses both technical compliance and business strategy that is focused ultimately on the end user.

·   Pending patent in cloud computing domain with United States Patent and Trademark office.

·   Open source Contributor for Netflix spinnaker.

TECHNICAL SKILLS

 

Language	Java, Javascript
Web	Html, Google closure, soy templates, underscore
Hypervisor	VMWware, Citrix Xen
Public Cloud	AWS, Azure, OpenStack
Firewalls	Security groups, Network ACL, Cisco FWSM, VSG
LoadBalancer	Elastic LoadBalancers, Cisco ACE.
Storage	EBS
Network	VPC, Network Containers
Index Engine	ElasticSearch, Lucene
Version Control	Perforce, Git
Framework	Spring, JQuery, AJAX, NodeJS, Atmosphere, Jackson, Apache Storm
App Server	Virgo, Tomcat, Equinox, Weblogic, OSGI containers
UML Tools	MagicDraw
Vulnerability Engines	Qualys, Nessus
Containerization	Docker, Kubernetes
WebServer	Jetty, Netty
Message bus	Apache Kafka
Development methodolgy	Continuous integration, LEAN Agile, Rally, SCRUM teams
Opensource contributions	Netflix Spinnaker

 

 

Education

MS (Computer Science) Boston University 2010- 2012

MS (Information Technology) PTU 2002- 2003

BS (Electronics ) Nagpur University  1998 - 2002

 

 

 

 

PROFESSIONAL EXPERIENCE

 

BMC SoftwareArchitect  May 2015 – Present

Secops As a Service

 

  A microservices driven architecture to deliver continuous threat monitoring for vulnerability management with real time streaming data from vendors like Qualys, Nessus and Rapid7. The goal of the product is to do active vulnerability management, the product was initially prototyped to run exclusively on AWS infrastructure using aws api gateway, amazon kinesis, dynamo db and redshift. The vulnerability assessment data is pushed into the aws cloud from an onpremise microservice agent which reads data from Qualys & Nessus and using Kinesis producer library to push data to Kinesis bus.  Lambda functions read data from kinesis and process the vulnerability data [vulnerabilities per server].

 

Production : For productizing we used a BYOA model where we had microservices performing different bounded context functions, each of these microservices interacted with each other in REST and via a Kafka message bus. The loose coupling between

A typical microservices stack included Netty, JAX-RS, Resteasy, Kundera, Cassandra, Elasticsearch, Kafka, docker, kubernetes driven deployment model, swagger. Hosting provider was AWS.

 

Roles and Responsibilities:

·   Created the secops-ingest, secops-auto-mapping[server and vulnerability mapping based on cve] microservice.

·   Used Qualys, Nessus SDK api to retrieve and push data to aws.

·   Integrated Kundera JPA with Cassandra

·   Implemented docker , kubernetes deployment model

·   Wrote the kubernetes java sdk library for integration with other microservices.

·   Used Kafka consumer and producer library.

·   Defined api’s using swagger.

·   Demonstrate scalability with a truly decoupled microservices driven architecture.

 

 

Environment: Java, Netty, JAX-RS, Resteasy, Kundera, Cassandra, Elasticsearch, Kafka, docker, kubernetes driven deployment model, swagger

 

 

BMC SoftwareArchitect  Sep 2008 – Present

 

BMC CloudLifecycle Management [AWS, patching, compliance]

 

BMC CLM is a cloud management platform that enables service providers to create public clouds with advanced compute and networking configurations. CLM provides a placement driven selection of computing, networking and storage targets. BMC’s Cloud Lifecycle Management product enables designing and delivering multi-tier cloud services with hybrid cloud support allowing choice across infrastructure and private and public cloud platforms. It supports auto scaling, cloud governance by monitoring, capacity analysis and chargeback, compliance management by enabling integration with enterprise IT service management tools.

CLM also lets you provision your LAMP stack to a hybrid cloud helping the service providers to leverage the best in the physical server and virtualization space.

 

Roles and Responsibilities:

·   Founding engineer for BMC CLM.

·   Designed and conceptualized the idea of authoring drag and drop cross cloud network blueprints for public clouds like AWS, Azure.

·   Architect and Technical Lead for CLM-AWS integration. To quote AWS, this was the best AWS integration among the big 4.

·   Designed and developed a logical abstraction layer of object model for CLM, this helped develop a normalized UI for different hypervisors, Iaas, Paas platforms.

·   Designed and implemented the concept of ‘network paths’ in aws.

·   Developed UI modules for the day-2 management portal for compliance, patching.

·   Designed and developed the qualys integration modules.

·   Designed and developed an SDK for cross product integration.

·   Added Cisco VSG support into the CLM network portfolio.

·   Authored white papers on dockerization of existing product portfolio, deployment strategies with load balancers and firewalls.

 

Environment: Java, Virgo, Jackson, AWS[VPC, SG, NACL, AZ, ELB, EBS, VPN], Azure, VMWare, Citrix Xen, Oracle, SQL, CloudDB, Spring, Jackson, Atmosphere, Google closure, soy templates, REST, Adapters, VSG, Cisco devices.

 

BMC SoftwareLead Product Developer  Sep 2008 – Present

 

BMC Bladelogic server automation

 

BSA is the data center automation engine which provides provisioning, compliance, patching and remediation capabilities in the server management space.

 

Roles and Responsibilities:

·   Designed and developed the java api’s for BSA core modules.

·   Designed and developed the bladelogic webservices [SOAP & REST] ground up.

·   Developed webservices build scripts.

·   Added MTOM driven attachment support for webservice api’s.

 

 

CA TechnologiesSoftware Engg (R&D)July 2007 – To present

 

Project: Identity Manager r12

 

CA Identity Manager is an industry defining identity management product that allows enterprises to manage end to end lifecycle of user identities across all enterprise resources. It manages user access privileges across accounts in an enterprise. It can be coupled with CA Provisioning Server, which creates the user identities on endpoints              based on provisioning roles. There are identity policies which is a rule based engine, which can trigger events that can be replicated to the provisioning server.

 

Roles and Responsibilities:

·   Extensive development on r12 Identity Manager using core Java and J2EE platform supporting multiple application servers like Weblogic, JBoss and Websphere.

·   Have strong experience developing multi-threaded application.

·   Developed the inbound communication channel between provisioning server and Identity Manager using http post, decrypted the payload, based on requested headers converted the provisioning tasks to an Identity Manger task.

·   Used Http-client API , to post  request to a IM task webservice.

·   Used Recursion techniques to reach endpoints in parent container using Jiam.

·   Used JIAM API, to update the endpoints (LDAP, WIN-NT etc) for outbound synchronization.

·   Used SAX Parser, to read xml payloads and create IM value objects.

·   Used JCaptcha API, for authentication process to defy automated self registrations for Identity Manager.

·   Used Struts framework (used jsp, javascripts)to develop enhancements for Management console and localization.

·   Used Oracle and SQL server as objectstore for the product.

·   Developed vmware base image for provisioning and IM server.

·   Involved in doc review for the Identity Manager for product GA.

·   Used Rational ClearQuest for defect tracking and Rational ClearCase for source code control.

·   Developed Selenium framework with JUnit for automating IM GUI tasks, which runs on a nightly basis.

·   Used XPath, to develop use cases for IM GUI.

 

Environment: Java, BEA Weblogic, Oracle , SQL Server, XML, Xquery, XML Schema,Apache BeanUtils, Eclipse, AJAX, Solaris, VMWare Rational ClearQuest, Rational Clearcase.

 

 

 

State Street Global Advisors, Boston ConsultantJune 2006 – July 2007

 

Project: RAD

 

The Reporting Analytics Daily project involved providing start of day investment management reports and metrics for fixed income portfolio managers using raw files from Lehman, CitiGroup. The metrics are generated using aggregation, grouping, contribution etc. The RAD Crockpot massages the raw files. RAD allows to group securities in a portfolio at a fund level, Issuer level, Structure Ratings level, after grouping the securities it aggregates all the aggregatable metrics at a grouping level. Each fund may be having point or yieldbook as analytic source, base or generic as mortgage type, portfolio or benchmark at entity level.

 

Roles and Responsibilities:

·   Worked on XML Report spec and report job generation from GUI, using Spring framework and JAXB.

·   Used Spring framework for application development.

·   Developed Long Running Services Infrastructure.

·   Used Java Reflection techniques in classes.

·   Implemented Recursion for fund level file polling, developed a Poller framework.

·   Developed a Process Worker Framework for handling various process like aggregation.

·   Used Apache BeanUtils, Serialization Utils in the project.

·   Used Xquery for handling xml from GUI.

·   Implemented web security (view & edit mode) and File record locking.

·   Developed a State manager for enhanced error and exception handling.

·   Implemented raw reports by reading fund csv files from Point and Yieldbook sources.

·   Implemented classes using interfaces, used singleton, factory design pattern.

·   Developed Ant scripts for hot deployment on Weblogic Application server.

·   Developed Perl scripts to handle various processes.

·   Used Code forms to create deployment childs for Uat, Prod deployments.

·   Used Autosys for job scheduling, used jil files to maintain autosys environment in Dev, Devi, Uat and Prod.

·   Involved in preparing release notes for the product.

·   Used Rational ClearQuest for defect tracking and Rational ClearCase for source code control.

 

 

Environment: Java, BEA Weblogic, Oracle 8i, Spring, XML, Xquery, XML Schema,Apache BeanUtils, Eclipse, AJAX, Autosys, Perl, PL/SQL Developer, SSh tectia Client, Unix, Rational ClearQuest, Rational Clearcase.

 

 

 

Sipera Systems, Richardson, TXJava Developer  Aug 2005 – Apr 2006

 

Project: Savon Control center

 

Savon delivers comprehensive security systems for protection of session based real-time IP applications such as VoIP, Video & Multimedia. Sipera Systems products prevent the unauthorized use of the VoIP network, protect the privacy of the VoIP users, protect the VoIP network infrastructure assets and VoIP endpoints from various VoIP specific Denial of Service (DoS) attacks ranging from simple, brute force Flood DoS attacks to highly sophisticated, zombie, spoofing and malicious user driven Distributed DoS, Stealth DoS, Blended attacks, 0-day attacks and VoIP SPAM.

 

Roles and Responsibilities:

 

·   Involved in the GUI architectural review, involved in preparing the GUI FDD.

·   Worked on complete design and coding using JSP, Controller Servlets, JavaScript, SOAP-XML.

·   Worked on a module to run dynamic commands on Linux terminal using product GUI.

·   Worked on configuration of admin control center in modules like Log Archival, IM Logging, DOS Config, User & Groups, Spit Box.

·   Involved in Bug Fixing and Peer to Peer Code review.

·   Involved in real time Alarm statistics on GUI using AJAX.

·   Used SVN & Trac for source control of the project documents and code

·   Used various design patterns like Singleton, MVC architecture.

·   Worked on in- memory databases like SOLID.

·   Used Apache Ant extensively to Build applications.

·   Worked in deploying the application on a Hardened Linux on a Portwell box.

·   Involved in the product GA release.

 

Environment: J2EE, Java, JSP, Servlets, JavaScript, Apache SOAP Admin , Weblogic, Eclipse, Trac, ssh secure shell, Mozilla FireFox, Ant, SOLID.

 

 

Camilion Solutions, Toronto Consultant (Developer)Jan 2004 – July 2005

 

Project: Insurance Innovator^TM

 

Insurance Innovator^TM is an insurance resource planning product. It configures all aspects of the product definition - market eligibility, packaging, pricing, underwriting, electronic applications, and forms management. It has a Product process manager and a Product configuration. The PPM defines the business process to be attached an insurance product using Rule painters, Flow Painter.

 

A PC can author a product in accordance with key industry standards ACORD XML. Compliance with these standards ensures the products designed and developed using Insurance innovator can be integrated with both enterprise and third party systems.

 

Roles and Responsibilities:

 

Ø       Worked on PPM and PC modules.

Ø       Involved in architectural design of the application.

Ø       Involved in the detail design of the web modules.

Ø       Created Sequence Diagrams and Class Diagrams using UML.

Ø       Provided a SOAP-XML public API using RPC and XML.

Ø       Implemented an https support for the admin GUI.

Ø       Developed the project based on the MVC2 Architecture with JSP and Servlets.

Ø       Used Apache Ant extensively to Build applications

Ø       Implemented the BMP Entity beans for database objects and wrote Session beans for accessing Entity beans by using the Session façade design pattern.

 

Environment: J2EE platform, JSP, Controller Servlets, JAAS, MVC2 architecture, Sybase, DB Artisan, Eclipse, Websphere, SOAP-XML,UML, Design Patterns, Unix, MVC

 

 

Quark Inc, DenverMember-Java Development Group      Dec 2002 – Nov 2003

 

Project: Quark License Administrator GUI

 

QLA^TM monitors requests for Quark software licenses over your network. If a license is available, the request is fulfilled and a license is checked out, which completes the launch of the Quark application on the user’s computer. When users exit the Quark application, the license is checked back in and becomes available to someone else. The QLA GUI takes care of the user interface for the configuration parameters, users module.

 

Roles and Responsibilities:

 

·   Worked on the QLA Control Panel.

·   Involved in the users module, creating user roles and user hierarchy.

·   Worked on MBF for performance enhancement of the GUI.

·   Used MVC framework for developing the GUI,

·   Used various design patterns like Singleton, DAO,DTO

·   Used LDAP for authenticating users during login.

·   Worked on a Mac OS.

·   Involved in Bug Fixing, Bug scrubbers.

 

Environment: Java, JSP, Servlets, JavaScript, Sun One, Mac OS, JBuilder, Oracle, LDAP.