7. Centralized Authentication & Access Governance
Overview
Designed and enforced a unified identity, authentication, and access governance architecture across multi-tenant security data services and database infrastructure at Cisco Systems. Modernized disparate authentication mechanisms by implementing centralized authentication workflows integrating AWS Cognito and Okta/OIDC for secure user identity management and seamless SSO across internal dashboards. Governed database access by enforcing IAM-based auth across AWS Redshift and AWS RDS, coupled with automated credential hardening and rotation via AWS Secrets Manager. Configured least-privilege role-based access control (RBAC) definitions in Terraform mapped to enterprise directory groups, maintaining immutable audit trails with AWS CloudTrail and Python compliance scanners to achieve full audit readiness aligned with FedRAMP Moderate and AWS GovCloud mandates.
Challenge
Decentralized database credentials, inconsistent local account provisioning, and sprawling IAM permissions across multi-region AWS environments posed security audit vulnerabilities and operational complexity for security data platforms.
Approach
- Implemented centralized authentication workflows integrating AWS Cognito and Okta/OIDC for secure user identity management and seamless SSO across internal dashboards.
- Governed database access by enforcing IAM-based auth across AWS Redshift and AWS RDS, coupled with credential hardening via AWS Secrets Manager.
- Implemented least-privilege Role-Based Access Control (RBAC) schemas in Terraform, eliminating hardcoded credentials in deployment manifests.
- Established continuous compliance audits utilizing AWS CloudTrail and Python verification scripts to flag unauthorized privilege escalation.
Outcome
Eliminated static administrative database passwords across all production data stores, achieving 100% compliance adherence with federal security baselines and streamlining onboarding.