Utkarsh Rathod
DevSecOps & IAM Engineer · ForgeRock AM · IDM · DS · IG
Professional Summary
DevSecOps and Identity & Access Management (IAM) Engineer with 7+ years of experience building and operating enterprise-grade IAM platforms for Tier-1 banks across Asia. Specialist in the ForgeRock Identity Suite — AM, IDM, DS, and IG — with hands-on delivery at DBS Bank, ANZ, Standard Chartered, and Jago Bank. Expertise spans CI/CD pipeline engineering (Jenkins, Harness, CodeFresh, Drone), Kubernetes-native deployments on GCP and AWS EKS, zero-downtime version migrations, and secrets-aware automation with HashiCorp Vault.
Experience
Midships Pvt. Ltd.
DBS BankAsia's Largest Bank
- Managed UAT, Load Test, and Production ForgeRock environments — AM, IDM, DS (RS/CS/TS/US), IG
- Built multi-component CI/CD pipelines integrating Drone, Jenkins, and JIRA for artifact build and deployment
- Executed a zero-downtime migration from ForgeRock v5.2 → v7.1.2 across all environments
- Automated DS backups and cleanup with Shell Scripts and cronjobs; deployed to VMware via Ansible pipelines
ANZ BankGCP · Kubernetes + VM Hybrid
- Built CodeFresh pipelines to containerise and publish Docker images for the Midships ForgeRock Accelerator
- Upgraded deployment manifests from Helm to Kustomize for environment-specific configuration management
- Authored runbooks and handover documentation for environment transitions
Standard Chartered Trust BankAWS EKS
- Designed Harness pipelines to build, promote, and deploy ForgeRock containers onto AWS EKS
- Migrated accelerator code to client environments; resolved environment-level configuration incompatibilities
Standard Chartered EnterprisesOn-Premises
- Deployed DS User Store and Replication Server on-prem via Ansible + Shell Script pipelines
- Integrated Rundeck with Jenkins, Ansible, and HashiCorp Vault for automated, secrets-aware DS deployments
- Migrated LDAP directory data from cloud to on-premises with replication integrity validation
Jago BankGCP · Kubernetes
- Automated Kubernetes CronJob for ForgeRock DS backup and restore — 4 scheduled backups per day
- Implemented automatic transfer of DS backup archives from Kubernetes pods to GCP Cloud Storage
InnoWave Technologies Pvt. Ltd.
- Managed CI/CD and production deployments for internal IAM applications (OAM, IMA Employee, IMA Customer) using Jenkins, Ansible, and OpenShift
- Handled privileged customer authorisation workflows via IDM integrations
- Monitored production microservices with Grafana and Dynatrace; triaged and escalated incidents
- Wrote PL/SQL queries for customer data operations; validated microservices using Postman
Tata Consultancy Services
- Managed Cisco switching infrastructure (2960/3750/3560/4506) and Nevis NAC devices in production
- Configured VLANs, STP, and port security across multiple locations
- Coordinated L3 switch rollouts; managed device backups and change documentation
Trueserve Technologies
- Performed BCP activities including failover on production routers
- Configured and troubleshot Cisco switches across production environments
- Configured and monitored switch security policies
- Generated weekly MIS reports on Symantec Anti-virus status
- Monitored load balancer traffic for multiple applications and escalated on sudden traffic spikes
Skills
Certifications
- ForgeRock Access Manager SpecialistActive
- Certified Info Security & Ethical HackingActive
- Certified Professional PingOne Advanced Identity CloudActive