Luvai Hassanali

Sep. 2022 – Present (2 yrs 2 mos)Global Affairs Canada (GAC)

Technical Advisor

Technical Lead - Enterprise Access Management (EAM-HA)

• Provide operational support for the EAM solution built on a ForgeRock stack, delivering secure access management for GAC applications e.g. Partners@International, CanExport Communities and ensuring 100% service uptime for 2+ years to over 10,000 global users across mission-critical applications
• Led the successful takeover of the EAM solution from the previous team and acted as the single point of contact for solution in GAC, while working alongside a contractor to manage system stability and compliance with security standards
• Work closely with the Shared Services Canada (SSC) External Credential Management (ECM) team to leverage Government of Canada Credential Federation (GCCF) services via SAML 2.0 to manage 5+ existing applications, and handle GCKey/Interac chooser page updates for bank branding changes or addition/removal of bank services
• Setup integration of new applications and support existing consumers by configuring agents on IIS (Windows) and Tomcat/JBoss (Linux) and leverage a streamlined process to reduce onboarding time by performing configuration via PowerShell script and Excel workbooks
• Provide 24/7 operational support for SSC Critical Business Application and Systems (CBAS), e.g. NEICS, New EXCOL systems, resolving all incidents within maintenance hours, and maintaining 100% system uptime
• Partner closely with IT security and SSC teams to ensure system integrity, implementing monthly patches to reduce vulnerability issues and maintain overall system stability
• Led 300k annual procurement process for GAC ForgeRock and RedHat licenses, managing the entire lifecycle including acquiring quotes, coordinating the request submission, and tracking up to receipt of invoices

Technical Lead - Azure B2C

• Provision multiple Azure B2C tenants to provide secure local account identities and SSO capabilities for 10,000+ users across AD, existing LDAPs, and GCCF Consolidator OpenID Connect (OIDC broker for GCCF SAML 2.0)
• Deliver 24/7 on-call operational support for GAC applications in production e.g. EduCanada Scholarships, Canada Ombudsperson for Responsible Enterprise (CORE) portal and ensure 100% of any user incidents are resolved within 24 hours
• Collaborate with SSC ECM team to manage applications using the GCCF Consolidator service to provide GCKey/Interac sign in, supporting 7+ application integrations. Support development teams with setup, conduct business line help desk training, and manage URL configurations
• Configure sign-up/sign-in user flows for GCCF, internal Active Directory, and external users, to improve client experience by enabling self management of profile/password
• Act as the authorized technical representative for GAC, liaising with GCKey and Interac Level 2 Service Desks to resolve widespread issues in Azure B2C (and ForgeRock) integrations to GCCF services, maintaining 100% service up time
• Provide technical guidance to developers and troubleshoot configuration issues. Assist other projects using legacy authentication systems to migrate, saving GAC $100k+ in licensing fees
• Develop skeleton applications to facilitate seamless migration of authentication to OIDC across web applications, including Power Pages, .NET ASP, and Java projects, reducing migration time for developers by several weeks/months

Power Platform

• Guide 10+ new clients through onboarding to Power Platform, providing architectural reviews, license procurement, and development best practices. Advised clients on project fit within GAC infrastructure, ALM process, and constraints implemented to align with IT security standards
• Provide ongoing support and technical expertise to internal Power Platform development teams, maintaining the team mailbox, triaging incident, change request, etc. tickets from the GAC system, and act as single point of contact for Microsoft technical support, ensuring timely resolution of platform issues
• Collaborate with Microsoft engineers to diagnose and resolve widespread issues in the GAC Power Platform/Azure environment. This assisted in preventing future incidents for any customers of Microsoft customers while strengthening the security/integrity of the platform
• Write PowerShell scripts to support Azure DevOps pipelines for Power Apps and on-premises Dynamics 365 solutions, introducing source control and automated release management, reducing deployment errors and preventing hours of manual work
• Provide senior management with timely updates and recommendations for license procurement including cost recovery and risk mitigation. Execute migration of 5000 end-user licenses from $60 Case Management to $10 Power Apps premium, reducing annual licensing costs by $1m
• Act as Deputy Director during absences including overseeing daily operations, managing a team of 8 members, and resolving senior management requests, resulting in zero operational disruptions and maintaining project timelines
  
• Train new hires to administer the Power Platform, providing ongoing guidance for feature implementation and bug fixes. Write comprehensive documentation to reduce time required of newcomers, in turn improving operational efficiency
• Provide operational support for legacy Dynamics 365 on-premises enterprise solutions including the backend for Compensation Gateway (Finance/Pay requests) and Labour Relations (Human Resources requests), and resolve all issues within 48 hours
• Support teams migrating on-premises solutions into the cloud through the Microsoft FastTrack process, successfully moving from on-premises into the cloud and reduce amount of troubleshooting, bug fixes required by participating in multiple sessions
• Request and manage custom domain names for projects and generate required SSL certificates for developers to ensure public facing sites are secured properly and renewed on time
• Develop and maintained security procedures for Power Platform, including IP restrictions, DLP policies, and file type block lists, reducing security vulnerabilities and ensuring compliance with organizational/IT security standards

Nov. 2021 – Sep. 2022 (11 mos)
Global Affairs Canada

Programmer Analyst

• Coordinate the development and release of a workspace booking app for the COVID-19 hybrid work model, leading a team of 5 to ensure smooth rollout as it was adopted for the first few months of return to work to help reduce booking conflicts
  
• Administer over 200 environments for Power Platform for use with Power Apps, Power Automate, Power Pages, and Copilot Studio, improving provisioning time by custom built .NET application leveraging various API calls to create and maintain environments
  
• Write PowerShell scripts to automate and track Azure AD Privileged Identity Management (PIM) role activations, eliminating role expiration errors while working
• Led the take over the Legal Affairs Bureau's JLD LDB Dynamics 365 solution, resolving all outstanding bug fixes and providing ongoing support post-release, ensuring uninterrupted service. Collaborated with SSC to release the update to Treaties solution (JLD LDB front end)
• Delegated Microsoft Tier 0 Administrator for GACs with Privileged Access Workstation (PAW) to manage and administer components of Azure according to IT security standards to ensure integrity of operations and minimize risk of breaches
  
• Assign and track licenses for multiple project initiatives of over 5000+ Azure AD accounts across Power Platform environments including  administrators, developers, end users
  
• Develop Security Work Orders and Recommendations Documentation (SWORD) Power Apps model-driven app for the IT Security team. This helped their team track and automate manual tasks and improve workflow of cases to focus time on other critical organizational needs
  
• Install and configured the Microsoft Center of Excellence Starter Kit, enhancing real-time monitoring for Power Platform environments, enabling visibility into project statistics for management and reducing troubleshooting time for technical issues
  
• Troubleshoot and resolve operational issues of the Power Platform with developers, vendor (Microsoft support engineers) to help minimize incident response time and any business impact
  

Jul. 2019 – Nov. 2021 (2 yrs 5 mos)General Dynamics Mission Systems Canada (Calian)

Software Developer

• Led migration of codebase from TFS to Git and migration of application installers from Visual Studio Installer Projects to WiX Toolset, eliminating all dependency issues from previous solution and improving workflow for developers and packaging team
• Developed a patch for ArcGIS 9.3.1 to enable legacy BattleView software compatibility with Windows 10, this extended software usability for years, prevented a complete refactor of the project, and avoided costly purchase of COTS product
• Implement features, defect fixes, and component deprecations for BattleView and help developers in ramping up on a large codebase written over 10+ years, reducing ramp up time required for them to join and start contributing
• Contributed to the development of the Friendly Forces Tracking Gateway (FFTgw) WCF service to provide secure relay of friendly unit locations to NATO partners. Designed the service to comply with NATO protocols (IP1, WSMP, A-DATP-36), enabling secure communication for allied forces
• Implement a temporary versioning system using VBScript for MSI installers due to an unsupported version format in Visual Studio (e.g. 2.7.1.60028), this saved thousands in licensing costs for a third-party tools e.g. Advanced Installer
• Write PowerShell scripts and YAML templates for GitLab CI/CD pipelines, this helped reduce developer workload and increase visibility for DevOps and packaging team
• Design and implement a performance testing system for legacy and new friendly forces tracking applications. The data collected by the system helped senior management decide to halt development and not deploy the new software due to poor performance
  
• Analyze proposed solutions (e.g., SQL to CouchDB migration, CBRN warning reliability) within the high-security military environment with client and stakeholders, influencing key decisions that improved system security and performance, and reliability
  
• Work closely with testers to implement application requirements, provide support while writing test procedures, and ensuring all issues are resolved before the successful delivery of features
• Collaborate with DevOps team to design GitLab CI/CD pipelines, reducing deployment time by hours, and training/supporting developers on their implementation and usage
• Resolved a critical bug for a NATO legacy friendly force tracking application in the Canadian military’s Tactical System Integration Laboratory (TSIL), collaborating with NATO partners across 3 countries, this allowed Canada to proceed with testing during an international event
• Align with 2-month sprint increments using SAFe, conducting planning sessions, backlog grooming, and sprint reviews with multiple teams of over 50 developers to deliver for military
• Create user stories with clear definitions of done and estimated story points, improving development time estimates and communication between management, clients, and stakeholder by delivering clear timelines
• Practice daily scrum with the use of Kanban board and keep track of active work with software problem reports (SPRs), features, user stories, etc. in IBM RTC (previously Jira) to allow prioritization of high-impact items and ensure timely delivery

Carleton University2015 – 2019
Bachelor of Computer Science, Minor in Philosophy

Cairine Wilson Secondary School2009 – 2013
Diplôme d'Études en Langue Française (DELF B1)