Skip to content

$ ./init --profile

Hritik Bhandari

Senior Software Engineer @ Wells Fargo

Four years deep in enterprise identity and access management — designing the governance, provisioning, and approval systems that decide who can reach what across a bank of hundreds of thousands of identities.

view workcontactHyderabad, India
hritik@portfolio — zsh
Identities managed
260K+
Entitlements governed
3.56M+
Manual hours saved / year
430+
Years in cybersecurity
4+
01

About

$ cat about.md

I'm a Senior Software Engineer in Hyderabad working at the intersection ofenterprise Java andcybersecurity. For the past four years I've built and owned the identity governance systems at Wells Fargo — the platform deciding who gets access to what, for how long, and with whose approval.

That work spans core IAM modules serving3.56M+ entitlements and260K+ identities, connector ecosystems reaching from Active Directory to mainframe, and pipelines processing nearly 200K reconciliation events a day. More recently I've been leading modernization efforts — a 12c to 14c platform upgrade, a Java 21 migration, and enterprise CI/CD — alongside a team of engineers.

I care about systems that fail safely, governance that doesn't slow people down, and using agentic AI tooling where it genuinely removes toil rather than adding ceremony.

focus.json
"identity_governance":
"Certification, SoD, RBAC and approval workflow architecture at enterprise scale."
"platform_modernization":
"Legacy-to-current migrations across runtimes, COTS products, and 76+ repositories."
"delivery_engineering":
"CI/CD pipelines that replace scheduled manual releases with secure on-demand deploys."
"agentic_ai":
"Copilot, Devin and MCP-driven workflows applied across the SDLC."

Software Engineer with 4+ years of experience building secure, enterprise-scale software across the cybersecurity domain. Proven track record designing, developing, and deploying robust solutions, leading engineering teams, modernizing legacy infrastructure, and delivering CI/CD pipelines that reduce operational overhead. Experienced in applying agentic AI tooling across the software development lifecycle, with deep IAM expertise managing 260K+ identities and 3.56M+ entitlements.

02

Skills

$ ls -la ./stack

./languages

Languages

  • Java
  • SQL
  • Python
  • Shell
  • JavaScript

./frameworks

Frameworks & Architecture

  • Spring Boot
  • REST
  • Microservices
  • System Design
  • Distributed Systems
  • OOP
  • SOA

./iam

Identity & Access Management

  • IGA
  • Oracle Identity Manager (OIM)
  • SailPoint IIQ
  • Active Directory
  • Certification
  • RBAC
  • Privileged Access Management
  • SSO
  • SAML
  • OAuth
  • OIDC
  • MFA

./cloud

Cloud & DevOps

  • Azure
  • Linux
  • CI/CD
  • GitHub Actions
  • Harness

./tools

Testing & Tools

  • JUnit
  • Git
  • JIRA
  • ServiceNow
  • GitHub Copilot
  • Devin
  • Agentic AI Workflows
  • MCP Integrations
  • LLM Prompting
  • Machine Learning

./practices

Practices

  • Agile (Jira)
  • SDLC
  • Vulnerability Management
  • Test Automation
03

Experience

$ git log --author='Hritik Bhandari'

Wells Fargo

01/2022 – Present

Progressed from Software Engineering Intern to Senior Software Engineer through 3 promotions in 4 years.

  1. Senior Software Engineer | Senior AVP

    01/2026 – Present
    • Leading the enterprise Oracle Identity Manager 12c to 14c upgrade with a cross-functional team, spanning infrastructure, the COTS product, custom code, connectors, and end-to-end testing as part of the Technology Modernization program.
    • Drove the Java 8 to Java 21 upgrade across 76 application repositories, connectors, and workflow components.
    • Led a team of 5 engineers to design and implement enterprise CI/CD pipelines using GitHub Actions and Harness, transitioning from scheduled manual releases to secure on-demand deployments, eliminating 430+ hours of manual deployment effort annually while accelerating developer productivity.
    • Remediated 100+ high-priority AI-scanned security vulnerabilities across multiple IAM repositories and piloted Playbooks for Devin-assisted remediation to accelerate code fixes, PR creation, and deployment.
    • Developed a resilient Emergency Termination solution that removes access for terminated users within minutes by disabling accounts and revoking access across multiple platforms, integrated through Kafka and REST APIs with audit tracking, asynchronous status polling, and automated escalation for end-to-end control.

  2. Software Engineer | AVP

    07/2023 – 01/2026
    • Designed multi-level approval workflows with parallel and serial levels for privileged access using SOA and Java, including the CIO Approval workflow for privileged entitlements, reducing access creep and strengthening governance for high-risk access.
    • Owned core IAM modules for Wells Fargo's primary IAM Platform tool supporting 3.56M+ entitlements and 260K+ identities, enforcing enterprise-wide access governance.
    • Managed software pipelines processing 196K+ reconciliation events and 25K+ access provisioning transactions per day, maintaining a 99% success rate across 271 daily control jobs.
    • Improved the connector ecosystem (LDAP / Active Directory, Mainframe, SQL DB, Teradata, Web Services) and enforced request validations, ensuring accurate identity state and secure provisioning flows.
    • Developed a Bulk Access Request tool and REST APIs with Spring Boot to streamline access provisioning, reducing manual request processing effort by 40%.
    • Mentored engineers and new hires across onsite and offshore teams in an Agile (Jira) delivery model, accelerating onboarding and team productivity.
    • Serving as Subject Matter Expert (SME) for Certification and Approval Workflow architecture, core to enterprise governance and compliance.

  3. Associate Software Engineer

    07/2022 – 06/2023
    • Developed Segregation of Duties (SoD) processors and request validations for IAM governance controls.
    • Enhanced certification workflows and 50+ audit-driven notification systems for compliance and efficient user experience.
    • Collaborated with cross-functional teams across product, platform operations, business, and compliance to align IAM solutions with organizational protocols and objectives.
    • Delivered scalable Java and SQL based IAM features with a focus on Oracle Identity Manager.

  4. Software Engineering Intern

    01/2022 – 06/2022
    • Built foundational expertise in Identity and Access Management and Oracle Identity Manager, contributing to key projects within Wells Fargo's identity governance program.
    • Developed Java and SQL based schedulers to automate Bulk Access Requests, improving efficiency and reducing manual intervention for a more robust and scalable IAM infrastructure.

Walmart Global Tech

06/2021 – 08/2021

  1. Software Engineering Intern

    06/2021 – 08/2021
    • Automated manual categorization and reporting of support tickets using Machine Learning and API integrations, saving 10+ hours of manual effort per week.
    • Developed a Python-based automation application for scalable ticket processing, including clustering analysis of historical ticket data.
04

Selected Work

$ ls ./impact --detail

OIM 12c → 14c Enterprise Upgrade

oim-upgrade

Wells Fargo · Technology Modernization

Leading a cross-functional upgrade of the enterprise Oracle Identity Manager platform, spanning infrastructure, the COTS product, custom code, connectors, and end-to-end testing.

↳ Enterprise-wide IAM platform

  • Oracle Identity Manager
  • IGA
  • Migration
  • Leadership

Java 8 → 21 Migration

java-21

Wells Fargo

Drove a runtime and language-level upgrade across the full IAM codebase, covering application repositories, connectors, and workflow components without disrupting production governance flows.

↳ 76 repositories migrated

  • Java 21
  • Legacy Modernization
  • Connectors

Enterprise CI/CD Modernization

cicd

Wells Fargo · Team of 5

Designed and implemented enterprise CI/CD pipelines with GitHub Actions and Harness, replacing scheduled manual releases with secure on-demand deployments.

↳ 430+ manual hours eliminated / year

  • GitHub Actions
  • Harness
  • CI/CD
  • Team Lead

Emergency Termination System

emergency-termination

Wells Fargo

Built a resilient service that revokes access for terminated users within minutes — disabling accounts across multiple platforms via Kafka and REST APIs, with audit tracking, asynchronous status polling, and automated escalation.

↳ Access revoked in minutes

  • Kafka
  • REST APIs
  • Spring Boot
  • Audit

AI-Assisted Security Remediation

ai-remediation

Wells Fargo

Remediated high-priority AI-scanned vulnerabilities across IAM repositories and piloted Devin-assisted Playbooks to accelerate code fixes, PR creation, and deployment.

↳ 100+ vulnerabilities remediated

  • Devin
  • Agentic AI
  • Vulnerability Management

Privileged Access Approval Workflows

approval-workflows

Wells Fargo

Designed multi-level approval workflows with parallel and serial levels for privileged access using SOA and Java, including the CIO Approval workflow for privileged entitlements.

↳ Reduced access creep on high-risk entitlements

  • SOA
  • Java
  • PAM
  • Governance

Bulk Access Request Platform

bulk-access

Wells Fargo

Developed a Bulk Access Request tool backed by Spring Boot REST APIs to streamline access provisioning at enterprise scale.

↳ 40% less manual request effort

  • Spring Boot
  • REST
  • Automation

ML Support Ticket Categorization

ticket-ml

Walmart Global Tech

Automated categorization and reporting of support tickets using machine learning and API integrations, with clustering analysis over historical ticket data.

↳ 10+ hours saved per week

  • Python
  • Machine Learning
  • Clustering
05

Education & Certifications

$ cat credentials.log

SRM Institute of Science & Technology

Graduated 06/2022

Bachelor of Technology, Computer Science & Engineering

  • Achieved 2nd in department with a CGPA of 9.86
  • President & Founder of the Data Science Community at SRM, leading Machine Learning projects for the School of Computing

ISC2

Systems Security Certified Practitioner (SSCP)

ISC2

Certified in Cybersecurity (CC)

Microsoft Certified

Azure Security Engineer Associate

NPTEL

Database Management Systems (DBMS)

06

Contact

$ ./connect --open

Open to conversations about identity engineering, platform modernization, and security-critical backend systems — or anything interesting at that intersection.

say hello →
contact.sh
email:
bhandari.hritik@gmail.com
linkedin:
/in/hritikbhandari
github:
/hritikbhandari
location:
Hyderabad, India