Suraj Bagad

Project Overview:

Implemented a robust solution for a client seeking enhanced security measures for their Azure user authentication using Azure Identity and Access Management (IDAM). The primary goal was to block users attempting to access Azure authenticated applications without proper network or Cloud Access Security Broker (CASB) server verification.

Key Responsibilities:

• Requirement Analysis: Conducted a thorough analysis of the client's requirements to understand the scope and objectives of the project.
• Impact Analysis: Identified and assessed the key areas impacted by the implementation of the enhanced authentication feature:
• UI (User Interface): Integrated IDAP and Azure-related information seamlessly into the CASB product's settings page.
• Backend: Implemented storage mechanisms for IDAP policy settings to ensure secure and efficient data management.
• Operational: Facilitated the upload of trusted certificates for the reverse proxy, ensuring a secure and reliable connection.
• Implementation: Executed the necessary changes in the backend area, guided and coordinated with other 3 team members for remaining changes.
• Testing: Conducted rigorous testing to validate the functionality and security of the implemented solution. This included user authentication scenarios, policy enforcement, and certificate validation.
• Documentation: Prepared comprehensive documentation detailing the implemented changes, including step-by-step guides for administrators and end-users.
• Collaboration: Collaborated closely with cross-functional teams, including UI/UX designers, backend developers, and operational staff, to ensure a cohesive and effective implementation.

Project Overview:

Led efforts to significantly enhance the performance of an Antivirus (AV) engine widely utilized across enterprise and retail products for comprehensive malware scanning. The primary objective was to optimize the AV engine's performance, resulting in a remarkable 30% improvement.

Key Responsibilities:

1. Optimization of AV Engine: Undertook the responsibility of optimizing the AV engine's performance by addressing various aspects, ensuring efficient malware scanning for enterprise and retail products.
2. Continuous Memory Presence: Redesigned the AV engine to operate as a daemon, ensuring continuous memory presence of its components. This strategic enhancement eliminated the need for reloading during scanning requests, significantly reducing turnaround time for frequent scanning requests.
3. Definitions Footprint Reduction: Implemented a targeted file type scanning approach, specifically .dex files (Android-based), on the server to reduce the footprint of AV engine definitions. This tailored scanning approach contributed to a more streamlined and efficient engine.
4. Cross-Team Collaboration: Collaborated with diverse teams such as Server, Malware Analysis, and Signature Writing teams. Leveraged insights from security and technical expertise to fill knowledge gaps, offering guidance to junior team members.
5. Expanded Responsibilities to IPS Product: Took on additional responsibilities by managing the Intrusion Prevention System (IPS) product. This extended role involved ensuring the seamless integration and performance optimization of the IPS product alongside the AV engine.

Project Review:

• In my role, I encountered a challenge with the Windows native library codeine area that puzzled the entire team.
• With a keen eye for complex code structures, I took the initiative to dissect and comprehend the intricate workings of these native libraries.
• Not only did I unravel the complexity, but I also innovatively implemented an interactive password-based validation feature during the Windows
• Booting process.
• This feature empowered users with the choice to opt for or skip boot-time scanning, showcasing my ability to understand, enhance, and bring
• User-centric solutions to intricate technological challenges.