Mohith Pukale

Access management and enforcement. I own identity and authorization infrastructure for isolated, sovereign, and dedicated cloud environments, and lead the cross-team programs that get those environments stood up and kept running.

• Led design and delivery of the identity and permissions capabilities required for fully automated region bring-up, so new regions bootstrap policy provisioning and directory synchronization without manual intervention.
• Broke a cyclic dependency between the internal authorization platform and a legacy corporate identity provider, clearing the path to a modern provider with phishing-resistant hardware login in place of one-time passwords.
• Led the effort to identify users affected by that identity provider migration and to move them onto new credentials without loss of access.
• Authored the infrastructure-as-code provider for the authorization service, letting partner teams declare access resources directly instead of filing requests. Cut resource-creation time roughly 50% for our largest partner team, and extended the provider with owner groups and membership separation as adoption grew.
• Led automation of credential rotation for a security hardening initiative — standing up the rotator service, adding service-principal support across internal and customer-facing environments, and integrating an SSH certificate authority. Rotations dropped to under 5 minutes per secret with minimal manual involvement.
• Built security-key programming and lifecycle tooling for Windows, Oracle Linux, and secure-facility environments, including certificate provisioning for multi-factor workstation login. Regional teams could then program and distribute keys for 1,000+ users locally instead of depending on shipping from a single site.
• Reduced the entities under periodic access review from ~5,000 to ~200 by switching the reviewed entity from resources and groups to users carrying an eligibility attribute, cutting reviewer load without loss of coverage.
• Led design and delivery of an isolated administrative environment that gives internal support engineers scoped, audited access to dedicated cloud distributions, integrating console, plugin, and partner applications, and drove it through architecture and security review boards. Bootstrapped the resulting environments and automated their resource creation to remove most manual touch points.
• Built disaster recovery and multi-region administrative login with downstream partner teams, so dedicated regions stay reachable during a regional failure, and added per-region timeout controls with dynamic adjustment for regions on degraded networks.
• Stood up a Windows Active Directory proof of concept end to end — network, jump hosts, gateway, directory, and group policy login — then designed the pre-production and production architecture as a reusable blueprint for future customers.
• Refactored a single-purpose directory syncer into a generic job that synchronizes to multiple identity domains, and added batching to the directory update pipeline — splitting a bulk change across ~40k accounts into batches of 500 so it landed incrementally instead of blocking the pipeline on a single long-running thread.
• Mentor engineers through onboarding and their first designs, run brown-bag sessions and runbooks for the processes I own, and act as the technical point of contact for partner teams and program managers.