At Caterpillar, I design, deploy, and support highly available federation infrastructure for internal and external access, integrating PingFederate, Azure Entra ID, Azure B2C, Ping Access, AWS, ServiceNow, Salesforce, SailPoint, and Oracle.
I've migrated applications from PingFederate to Entra and B2C, implemented FIDO2/passkeys for privileged and high-risk applications, and secured REST APIs through OAuth/OIDC policies, token validation, and Ping Access authorization rules.
Across Becton Dickinson, American Family Insurance, LPL Financial, and BCBS, I've delivered SSO, MFA, SAML, OAuth, OpenID Connect, CyberArk, Okta, and IAM support while resolving production issues and strengthening access controls.

