Identity and SSO
Keycloak, Okta, Entrust. SAML, OAuth and OIDC, with mTLS and certificate lifecycle where devices are in the path. The goal is a platform, not a one-off login screen.
Systems Architect
Elisha
Ebenezer
Twenty-three years designing the parts of a system that outlive a release: the contracts, the seams, the operational paths. Healthcare, banking and telecom — places where a missed check is not a ticket, it is a patient, a payment, or a fibre cut.
Transforms manual, fragmented and tightly-coupled systems into reliable, maintainable platforms — delivering measurable gains in speed, consistency and operational efficiency.
23+
Years in architecture
Days → min
Banking reconciliation
40%
Fewer field dispatches
3
Domains: health, bank, telco
01 / Work
Selected programmes
- 01
ReciprocityAdaptive therapy management
Replaced logistics-heavy treatment data collection with a digital platform that enabled reliable Edge→Cloud capture of treatment data and Cloud→Edge delivery of updated therapy parameters.
Life Sciences · Architect
- 02
MFUData validation & reconciliation
Eliminated manual validation checks and reduced processing of hundreds of thousands of transactions from days to minutes, with consistent rules and maker-checker auditability.
Banking · Architect, lead developer & mentor
- 03
CSPWire-transfer processing
Modernized a monolithic wire-transfer system by decomposing it into modules aligned to business processes, legal vehicles and technical layers. Removed WebSphere lock-in and introduced CI.
Banking · Architect / lead developer
- 04
Hyperion & NextGenOptical / Ethernet fault isolation
40% reduction in technician dispatches; improved fault detection accuracy and optimized utilization of expensive network test resources.
Telecom · Architect
- 05
IRIS + TallymanPOS and debt-collection integration
Seamless synchronization of customer and debt-collection data between the POS system and Experian Tallyman, enabling reliable credit and recovery workflows.
Retail / Rent-to-Own · Integration architect
- 06
Identity platformsSSO, SAML, Keycloak and Okta
Independent Keycloak and SAML work for SaaS platforms — including a marketplace and training product — so sign-on is a platform, not a one-off login screen. Follow-on identity retainers sit alongside Okta, Entrust, mTLS and certificate lifecycle.
Security / Independent · Architect & implementer
- 07
Delivery engineeringCI/CD, containers, portable runtimes
Make change cheap: Jenkins and Maven CI, Docker packaging, and runtimes that are not welded to a vendor application server. On Upwork this included a two-year Maven EAR → WebSphere delivery engagement.
DevOps / Independent · Architect / lead
02 / Independent
EEWorx, and the delivery work
Direct and Upwork engagements in solution architecture, IAM/SSO, transition and digital transformation. 18 completed jobs, 5.0 where clients left a rating. Identity and pipelines treated as first-class architecture — Keycloak, SAML, Maven, Docker.
Delivery engineering
Jenkins and Maven CI, Docker, cloud-native packaging. A two-year independent engagement built EAR artefacts with Maven for WebSphere — the same discipline that took a wire-transfer platform off proprietary lock-in.
Architecture consulting
Current-state and future-state, design assurance, transition and digital transformation. The seams drawn before the build starts, so the team is not inventing a runtime on the day of go-live.
Client notes
From the Upwork record
“Great to work with Elisha, synced up with the team quickly to get the job done.”
5.0 · May 2021
SAML Expert to troubleshoot a Validation Error
“Elisha has great expertise in Java and spring framework. He solved all the issues I faced in an hour. Extremely helpful and highly talented.”
5.0 · May 2021
Spring Boot test cases using Mockito and PowerMock
“Elisha was flexible, quick, personable, and knowledgeable. Job well done and will hire him again. Thank you!”
5.0 · May 2021
Scala JDBC Connection Troubleshooting
“Excellent working with Elisha. He is skilled and always ready to help, provide support and share knowledge.”
5.0 · Nov–Dec 2021
Keycloak and SAML expert required
“Elisha was excellent to work with. Will work with him again if need arises.”
5.0 · May–Jul 2021
Java consultation over screenshare
Selected engagements
Identity and delivery
- IdentityCompleted
Keycloak SAML / SSO — SaaS marketplace and training platform
May 2023 – May 2024
- DevOps5.0
Building EAR file using Maven to deploy to WebSphere
Jun 2021 – May 2023
- Identity5.0
Keycloak and SAML expert required
Nov–Dec 2021
- IdentityCompleted
Keycloak SAML / SSO — SaaS marketplace and training platform
May–Sep 2021
- Identity5.0
SAML Expert to troubleshoot a Validation Error
May 2021
- Delivery5.0
Spring Boot test cases using Mockito and PowerMock
May 2021
- Consulting5.0
Scala JDBC Connection Troubleshooting
May 2021
- Consulting5.0
Java consultation over screenshare
May–Jul 2021
Full history — 18 completed, 10 in progress — on the Upwork profile.
03 / Practice
How the work is done
Architecture leadership
End-to-end solution architecture across telecom, banking, life sciences and IoT. TOGAF, Zachman and ITIL as working governance — not wallpaper. Value-chain mapping before a line of code.
Design assurance
Chair reviews with application, data, infrastructure and security domain architects. Publish standards, current-state and future-state views, and keep the meeting cadence honest.
Modernization without theatre
Decompose monoliths, drop proprietary lock-in, introduce CI and unit-testability, replace manual operational processes with platforms that stay changeable after the original team has moved on.
Cloud, delivery and identity
AWS, Azure and GCP as the substrate. Docker, Jenkins and Maven CI so a platform is reproducible. Keycloak, Okta and Entrust for SSO. Pipelines and identity are architecture, not an operations afterthought.
04 / Path
Experience
EEWorx
Jul 2026 – Present
Independent · Chennai
Systems Architect
- Independent architecture and delivery: IAM/SSO (Keycloak, Okta, SAML), cloud-native CI/CD, and platform modernization.
- Client work through Upwork and direct engagement — solution architecture, consulting, transition and digital transformation.
Virtusa
Dec 2014 – Jun 2026
Chennai
Systems Architect
- Architecture for Reciprocity, MFU and CSP — digital therapy capture, high-volume reconciliation, and a portable wire-transfer platform.
- Design direction across teams, chaired design assurance, established patterns reused on subsequent programs.
- Mentored engineers on modern platform practices.
Mindtree
Sep 2012 – Dec 2014
India
Architect
- Assessment and transformation of a bespoke POS platform for a major UK rent-to-own business.
- Defined technical design standards; mentored teams on Spring Batch, Spring Security and Java EE.
- Coordinated delivery with Technical Operations for consistent, maintainable outcomes.
Verizon
Aug 2005 – Aug 2012
Growth path
Software Engineer → Senior Engineer → Architect
- Telecom-grade network fault isolation and diagnostics for Long-Haul, Medium-Haul and undersea optical/Ethernet networks.
- 40% reduction in technician dispatches; better use of expensive test resources.
- Reusable middleware frameworks (CORBA, JMS, JAXB, JRules) and mentoring across distributed systems teams.
CollabNet
Mar 2003 – Jun 2005
India
Software Engineer
- Enterprise ALM platform development and client-specific instantiation engineering.
Bachelor of Engineering (B.E.) in Computer Science & Engineering — Madras University (2002)
05 / Stack
Technical range
Architecture & governance
Solution architectureTOGAF / Zachman / ITILReference architecturesDesign assuranceValue-chain mappingDomain-driven design
Languages & frameworks
JavaSpring BootJakarta EEC/C++RESTOSGiEmberJSHibernate
Cloud & platforms
AWSAzureGCPDockerThingWorxSaaS / managed hosting
DevOps & delivery
CI/CDJenkinsMavenDockerCloud nativePortable runtimesUnit-testability
Integration
Apache CamelKarafJMSCORBAJAXBREST
Security & IAM
KeycloakOktaEntrustmTLSPKI / certificate lifecycleSSO / SAML / OAuth
Modernization
Monolith decompositionRemoving proprietary lock-inUnit-testabilityCI adoption
06 / Contact
Start with a conversation
Architecture reviews, platform modernization, IAM/SSO, CI/CD, IoT/edge, and delivery unblocking. Chennai-based, remote by default. Hours posted in IST.
- Phone
- +91-842-845-7700
- linkedin.com/in/elisha-ebenezer
- Upwork
- Upwork profile
- Base
- Chennai, Tamil Nadu, India · IST (UTC+5:30)