John W. Baker
Raleigh,NC
Summary
Seasoned Lead Engineer with a strong background at KPMC, Inc., specializing in Identity and Access Management and SSO solutions. Demonstrated excellence in collaborative projects by achieving over 95% SLA compliance. I am known for effective team contributions and comprehensive process documentation, driving innovation and project success consistently. Career aspirations include leveraging technical expertise to further enhance organizational security frameworks.
Overview
24
24
years of professional experience
Work History
Lead Engineer I, Single Sign On (SSO) Admin- Okta & IBM FIM Engineer
KPMG, Inc
08.2016 - 10.2024
- As a member of the Identity Management and Access Team, my primary focus was on Single Sign-On (SSO)
- I used two systems for Single Sign-On setup (IBM Tivoli Federated Identity Manager (TFIM) and Okta) for internal and external Single Sign-On
- Responsible for OKTA setup with pass-through authentication with AD, agentless DSSO (Desktop Single Sign-on), and IBM Directory Server
- Configured and set up OKTA, RSA, AD, and LDAP agents on Windows Server
- Configured the following types of SSO applications: SAML, OAuth, and OpenID Connect, and mobile using OKTA Fastpass
- Collaborated with numerous teams within KPMG to set up SSO applications
- Assisted the business and vendors in troubleshooting SSO issues
- Managed requests to modify and/or update existing SSO applications
- Worked on LDAP, WebSeal, and AAC
- Finished all my SSO projects within the specified SLA, consistently above 95%
- Worked on many high profile SSO engagements (Tax, Audit, Advisory, BPG)
- Completed all paperwork following specified SLA project timelines, for every SSO project
- Recently completed project J2DD, which is a top Corporate Initiative for KPMG ahead of schedule
- High performer on the Identity and Access Management Team
Security Engineer Security
Blue Cross and Blue Shield of North Carolina
10.2014 - 08.2016
- As a member of the Information Center of Excellence (ICOE) team
- I supported Enterprise Identity & Access Management, Single Sign-On (SSO) via the Federation for Workforce (WF) and Non-Workforce (NWF)
- Part of the startup team to implement SSO within the BCBSNC environment
- Configured third-party web applications with Tivoli Federated Identity Manager (TFIM), gathering certificates, and exchanging metadata with multiple vendors, depending on applications
- Using SAML 2.0
- Ran all testing in development and Pstage (the step before production), and wrote up any supporting documentation to support the implementation process, whether passing or failing
- Worked within inter-departmental teams to support the implementation of Single Sign-On (SSO) products
- Helped set up an SSO sandbox to test and configure SSO via SAML 2.0
- Nominated for the COO Innovation Award for the implementation of SSO
- Successfully implemented 20 SSO projects with third-party vendors from discovery through to production
Sr. Systems Engineer, COTS II at CSC/EPA Identity
CSC
11.2011 - 10.2014
- In my role as Sr
- As a Systems Engineer at CSC/Environmental Protection Agency, I led the implementation of Enterprise Identity and Access Management solutions for 25,000 users nationwide
- By providing Active Directory, federation, and two-factor authentication support, I ensured secure access for EPA employees across ten regions
- My efforts in enhancing system efficiency and security measures significantly contributed to the smooth operations of the agency
Identity Management Specialist
ii2p, Inc
02.2011 - 08.2011
- Lead technician for upgrades, installations, and administration of Hitachi Password Manager Software
- Versions supported 6.4.x through 7.10 (Virtual Contract Position – worked out of my home office)
Systems Administrator / Identity Management
Pfizer (formerly Wyeth Biotech)
04.2004 - 10.2010
- Supported fifty-two sites on a virtual team, providing support for an $84B pharmaceutical and biotechnology company
- Managed 35K network accounts throughout the U.S., Puerto Rico, Latin America, and Canada
- Created and managed Active Directory, E-Directory, LDAP, email, VPN administration, and Blackberry functionality
- Collaborated with Identity Management (IdM) teams in EMEA and APAC
- Improved new-hire onboarding processes, saving the company $4M in the first year
- Standardized account processes across Latin America and North America, making sure every site was following corporate policy
- Served as a subject matter expert and Project Manager for Latin America and Puerto Rico, leading the initial implementation of standardized account management services across nineteen sites in four months
- Implemented a remote access token project that saved the company $150K (more than 50%) annually
- Increased speed of service from 1 to 5 days to one day, regardless of location
- Changed procedures to accurately document Sarbanes-Oxley compliance during the workflow, significantly reducing the amount of time spent in the audit and increasing the success rate from 75% to 100%
- Served as the primary point of contact for the HRIS team, providing global cross-company access during the merger of Wyeth and Pfizer, and ensuring Pfizer had access to business-critical data while completing all requests in less than 24 hours
- Performed account/email research for Sarbanes-Oxley audits covering the Americas, and Regional IdM tasks, ensuring quick response to legal challenges while maintaining data confidentiality
- Researched and provided resolutions to SAP Security on role assignment problems, resulting in clients being able to work efficiently without any production downtime
- Exceeded required SLAs, averaging 98%
- Built greater client trust and satisfaction with the group, making it a model for other regional facility management teams in EMEA and APAC
- Ranked as the top performer on the Americas Regional IdM team, closing out 26% of the monthly problems and requests submitted to the Identity Management work queue
IT Associate Engineer - Help Desk
Wyeth
10.2001 - 04.2004
- Served as a single point of contact for clients regarding IT technology questions or problems
- Provided pager and telephone support as a backup
- Ran one of the top-rated help desks: maximized client productivity by answering questions, resolving issues, or escalating problems to appropriate support teams
- Supported approximately 2,100 clients, closing an average of 1,200 requests per month, with an average client satisfaction rating of 4.9 out of 5.0
Desktop / Helpdesk Specialist
Elcom Services Group
11.2000 - 08.2001
- Served as a consultant, providing desktop and helpdesk support to major corporations, hospitals, and school districts, including Aventis Pharmaceuticals, UMDNJ, BASF, Camden and Allentown School Districts, and Wyeth in Princeton, NJ
Education
Diploma - Computer Technical Support
The Chubb Institute
Springfield, PAAssociate of Science - Business Administration
Bucks County Community College
Newtown, PASkills
- Identity and Access Management
- Effective Team Contributor
- Process Documentation
- Collaborator
- Two-Step Verification Implementation
- Application Deployment Expertise
- Proficient in SSO Solutions
PORTFOLIO
www.linkedin.com/in/john-baker-7334161a
PHONE
- Mobile, 919-259-4986
- Alternate, 919-285-4400
QUALIFICATIONS SUMMARY
- Identity and Access Management
- Effective Team Contributor
- Technical Documentation
- Collaborator
- Problem Solving
- Two-Step Verification Implementation
- Application Deployment Expertise
- Proficient in SSO Solutions
- Leadership
- Project Management
- Security Protocols
Timeline
Lead Engineer I, Single Sign On (SSO) Admin- Okta & IBM FIM Engineer
KPMG, Inc
08.2016 - 10.2024
Security Engineer Security
Blue Cross and Blue Shield of North Carolina
10.2014 - 08.2016
Sr. Systems Engineer, COTS II at CSC/EPA Identity
CSC
11.2011 - 10.2014
Identity Management Specialist
ii2p, Inc
02.2011 - 08.2011
Systems Administrator / Identity Management
Pfizer (formerly Wyeth Biotech)
04.2004 - 10.2010
IT Associate Engineer - Help Desk
Wyeth
10.2001 - 04.2004
Desktop / Helpdesk Specialist
Elcom Services Group
11.2000 - 08.2001
Diploma - Computer Technical Support
The Chubb Institute
Associate of Science - Business Administration
Bucks County Community College
Similar Profiles
John W. BakerJohn W. Baker
Lead Engineer I, Single Sign On (SSO) Admin- Okta & IBM FIM Engineer at KPMG, IncLead Engineer I, Single Sign On (SSO) Admin- Okta & IBM FIM Engineer at KPMG, Inc
Akiko HosakaAkiko Hosaka
IT Risk Management Consultant at KPMG Consulting Co., Ltd., KPMG Business Advisory,IT Risk Management Consultant at KPMG Consulting Co., Ltd., KPMG Business Advisory,
Akshay SachdevaAkshay Sachdeva
Senior Audit Associate at KPMG Resource Centre Pvt Ltd/ KPMG Global Services (UK Division)Senior Audit Associate at KPMG Resource Centre Pvt Ltd/ KPMG Global Services (UK Division)
Bryan GambelBryan Gambel
ECommerce Assosiate at KrogerECommerce Assosiate at Kroger
Samuel GerardSamuel Gerard
Stagehand at Rock Creek EntertainmentStagehand at Rock Creek Entertainment