Global IAM Platform
An internal, cloud-native Identity and Access Management product for Citi.
An internal, cloud-native Identity and Access Management product for Citi.
EEMS (Enterprise Entitlement Management System) is a comprehensive Identity and Access Management (IAM) platform that transformed how Citi manages digital identities and access controls at scale. The platform serves as the central nervous system for secure access management, processing over 10 million authentication requests daily across three continents.
Senior Software Engineer
Oct 2024 – Aug 2025
Software Engineer
Dec 2021 – Oct 2024
Legacy authentication mechanisms exposed the organization to potential breaches, with outdated protocols and weak password policies. Manual user provisioning processes led to orphaned accounts and excessive privileges, creating security gaps.
Manual user management consumed 15+ hours weekly across IT teams. The absence of self-service capabilities resulted in 50+ daily access-related helpdesk tickets, creating bottlenecks in employee onboarding and role changes.
Lack of centralized audit trails made compliance reporting a manual, error-prone process. The organization faced challenges demonstrating compliance with financial regulations during audits, with access reviews taking weeks to complete across multiple systems.
The existing system couldn't handle the growing volume of 10M+ daily authentication requests across three continents. Performance degraded during peak hours, with authentication latency exceeding 5 seconds, directly impacting employee productivity and customer experience.
Note: Detailed architecture diagrams and implementation specifics are not included in this case study due to confidentiality agreements.
Implemented a robust authentication system using OAuth 2.0 and OpenID Connect with Spring Security and JWT. This provided secure, stateless authentication with support for multi-factor authentication (MFA) and single sign-on (SSO) across all enterprise applications.
Achievement: 95% reduction in security vulnerabilities and 50% faster authentication
Architected and led the migration from a monolithic system to a microservices-based platform using Spring Boot 3.x and Java 17. The new architecture improved system resilience, with independent scaling of authentication, authorization, and user management services.
Result: 70% improvement in deployment frequency and 60% reduction in incident resolution time
Designed and implemented an event-driven architecture using Apache Kafka to handle 10,000+ events per second. This enabled real-time access control updates, audit logging, and cross-service synchronization with eventual consistency across all regions.
Impact: 90% improvement in data throughput and sub-100ms latency for access control updates
Engineered a containerized infrastructure using Docker, Kubernetes, and OpenShift with multi-region deployment across AWS and Azure. Implemented GitOps practices with ArgoCD for declarative infrastructure management and automated scaling based on real-time metrics.
Outcome: 99.99% availability and 80% reduction in infrastructure costs through efficient scaling
Built robust CI/CD pipelines using Bitbucket, Jenkins, and Maven, reducing deployment time by 50%. Automated testing and deployment processes minimized human error and accelerated feature delivery.
Key Achievement: 50% faster deployments
CI/CD pipeline automation
via Apache Kafka
Checkmarx & SonarLint
Global IAM platform
L1 support
Through code reviews
Interested in discussing scalable system architecture or exploring collaboration opportunities?