6 min readSecurityFeatured
Multi-Cloud Governance: Access Reviews and Drift
A technical look at managing access reviews and identifying entitlement drift in multi-cloud identity governance frameworks.
Part 5 · Multi-Cloud IdentitySenior Team Lead · Identity & Security · Noida, India
Hey, I'm Ashish. I build identity & security systems for software you depend on.
Senior Team Lead at Thales building identity & access management systems. 13+ years across Java/Spring, AWS, and security protocols (OAuth2, OIDC, SAML, ForgeRock, Keycloak). I like quiet systems that just work.
Experience
Where I've worked
Jan 2023 — Present
Senior Team Lead · Thales
Leading identity & security workstreams in Noida — designing IAM platforms, hardening protocol implementations, and mentoring the team across Java/Spring services.
Feb 2021 — Jan 2023
Associate Architect · Nexgen IOT Solutions
Architected microservice platforms and OpenStack-based deployments. Designed end-to-end solutions across backend services, security, and cloud infrastructure.
May 2019 — Feb 2021
Senior Software Engineer · IDEMIA
Built Identity Providers and brokers across multiple security protocols (OAuth2, OIDC, SAML). Worked closely with customers to configure SSO/SAML against their IdPs.
Apr 2018 — May 2019
Software Engineer · Oniondev Technologies
Migrated a Django monolith into microservices for a high-traffic social audio platform serving rural India. Tuned existing services for scale.
Sep 2015 — Mar 2018
Software Developer · Debug Design
Full-stack development across Spring Boot, Spring Cloud, and Angular for hotel booking, insurance, and legaltech products. Owned features end-to-end from requirements to production.
Feb 2014 — Apr 2015
Software Developer · Hovel Scale and Systems
Drove design and engineering quality across early-stage products. Established practices for repeatable delivery on a small team.
Jan 2013 — Feb 2014
Software Trainee · Dynakode Technology
First role. Built JSP front-ends, learned the JVM stack, and shipped maintenance fixes across legacy applications.
Stack
Tools I reach for
JavaSpring BootSpring SecuritySpring CloudOAuth 2.0OIDCSAMLForgeRockKeycloakAWSgRPCGraphQLMicroservicesOpenStackPythonGoNode.jsAngularMongoDBPostgreSQLRedisDocker
Selected work
Projects
Daystays
Full-stack hotel booking OTA with real-time vendor quotes, payment & SMS gateway, channel manager integration. Uber-style data calls between guest and hotelier for current-day inventory.
Spring BootSpring CloudMySQLJava
Mobile Vaani
Social audio platform for low-literacy rural communities — record via IVR or Android, share, like, comment. Microservice backend serving large user base across India.
SpringMicroservicesPython/DjangoMySQL
Symbo Insurance
Cloud-native insurance broking portal. Twelve-Factor microservices with circuit breakers, intelligent routing, and horizontal autoscaling.
Spring BootSpring CloudMongoDBReact
Trypz
Subscription-based Internet Booking Engine for travel agents — multi-tenant ticketing across train/bus/flight with custom domains, themes, and third-party SMS/email/payment integrations.
Spring BootMicroservicesAngular 2MongoDB
Writing
Latest from the blog
6 min readDevelopmentFeatured
Federating AWS, Azure, and GCP to One Identity Provider
A technical walkthrough for cloud and identity engineers on unifying AWS, Azure, and GCP access through a single SAML-based identity provider.
Part 3 · Multi-Cloud Identity
6 min readDevelopmentFeatured
OAuth 2.0 Refresh Tokens in Angular: Silent Refresh with useRefreshTokens
A practical guide to managing access token expiration in Angular applications by leveraging userefreshtoken and setupautomaticsilentrefresh for uninterrupted user sessions.
Part 4 · angular-oauth2-oidc in ProductionElsewhere
Find me online
Reach me directly at me@ashishsrivastav.com.