Projects · Identity
Enterprise SSO and IAM architecture across Phoenix Contact's global web and e-commerce platforms — evaluated, selected, and implemented from the ground up.
As System Administrator, evaluated multiple identity providers against Phoenix Contact's requirements for enterprise SSO, MFA, and lifecycle management. Selected Okta as the best fit.
Led the initial implementation of Okta as the identity provider for Phoenix Contact's web platform, establishing the foundation for all downstream SSO integrations.
As Senior DevOps Engineer, became the primary technical lead for all global Okta integrations across web and e-commerce platforms, driving enterprise identity architecture.
Enterprise identity at scale requires fluency across multiple protocols — each suited to different integration patterns and trust models.
Token-based authorization and authentication for modern web and API integrations. Used as the primary protocol for new platform integrations at Phoenix Contact.
XML-based federation for enterprise application integrations. Handles legacy SaaS and internal tooling that predates OIDC adoption.
Full lifecycle management — provisioning, deprovisioning, MFA enforcement, and SSO across global platforms. Okta Certified Consultant since Feb 2023.
Centralized SSO across web, e-commerce, and internal tooling — reducing credential sprawl and improving the developer and end-user experience.
Multi-factor authentication enforcement with risk-based policies, balancing security requirements against user friction for global teams.
Automated user provisioning and deprovisioning tied to HR systems — ensuring access is granted on day one and revoked immediately on offboarding.
OAuth 2.0 token validation and API gateway integration using OpenResty and NGINX — securing headless e-commerce APIs at the edge.