Manish Varma

ACE IDX - Identity & Access Management Platform

A comprehensive IAM platform featuring Single Sign-On (SSO) with Single Log Out (SLO) capabilities, providing seamless authentication across multiple applications. The platform implements Multi-Factor Authentication (MFA) for enhanced security, supporting various authentication methods including traditional passwords, one-time passwords, and biometric authentication.

Key features include Passwordless Login options via E-mail/SMS OTP, Time-based One-Time Password (TOTP), and WebAuthn for modern, secure authentication. The platform supports Identity Federation through Active Directory and LDAP integration, enabling enterprise-wide identity management. Implemented sophisticated Group-based Authentication with both Policy-Based Access Control (PBAC) and Fine-Grained Access Control (FGAC) for client APIs, ensuring precise control over resource access.

Additionally, developed the ACE IDX mobile application for iOS and Android platforms, allowing users to approve MFA and Passwordless Login requests on-the-go, providing a seamless and secure user experience across all devices.

Lead Management Portal - Internal CRM System

Designed and developed an internal Customer Relationship Management (CRM) system specifically tailored for the ACE IDX sales team. The portal streamlines the entire sales pipeline from lead capture to customer onboarding, featuring automated workflows that significantly reduce manual intervention.

The system includes a sophisticated one-click software deployment mechanism that enables instant provisioning of ACE IDX instances for new customers, reducing deployment time from hours to minutes. Leads are automatically captured and integrated from the ACE IDX marketing website, ensuring no potential customer inquiry is missed.

The portal provides comprehensive lead tracking, including status updates, communication history, follow-up reminders, and conversion analytics. Sales team members can collaborate effectively with shared notes, task assignments, and real-time notifications, improving team coordination and customer response times.

ACE Cloud - Cloud Infrastructure Platform

Developed multiple cloud service modules for ACE Cloud, transforming infrastructure management into a self-service platform. The Kubernetes as a Service (KaaS) module enables users to provision, manage, and scale Kubernetes clusters through an intuitive interface, abstracting away the complexity of cluster management while providing full control over configurations.

Created the Database as a Service (DBaaS) module supporting multiple database engines including MySQL, PostgreSQL, MongoDB, and Redis. The service handles automatic backups, point-in-time recovery, scaling, and high availability configurations, allowing developers to focus on application logic rather than database administration.

Built the Container Registry as a Service (CRaaS) providing secure, scalable storage for Docker images with features like image scanning for vulnerabilities, access control policies, and integration with CI/CD pipelines. Implemented comprehensive Identity and Access Management (IAM) with Role-Based Access Control (RBAC) and Fine-Grained Access Control (FGAC), ensuring secure resource isolation between teams and projects.

Led the research and development initiative for transitioning the monolithic architecture to microservices and microfrontends, conducting proof-of-concepts, evaluating technologies, establishing architectural patterns, and creating migration strategies that enabled the team to scale development independently.

Admin Portal - Cloud Services Dashboard

Developed a comprehensive administrative dashboard for monitoring and managing client usage of ACE Cloud services including Kubernetes as a Service (KaaS), Database as a Service (DBaaS), and Container Registry as a Service (CRaaS). The portal provides real-time visibility into resource consumption, service health, and operational metrics.

The dashboard features advanced analytics and reporting capabilities, enabling administrators to track usage patterns, identify bottlenecks, generate cost reports, and optimize resource allocation. Implemented alerting mechanisms for critical events such as resource exhaustion, service degradation, and security incidents.

Created intuitive interfaces for performing administrative tasks such as quota management, access control configuration, service provisioning/deprovisioning, and audit log review. The portal integrates with billing systems to provide accurate usage-based invoicing and supports multi-tenancy with organization-level isolation.

Acefone - Cloud Telephony Platform

Made significant contributions to Acefone's cloud telephony platform, developing and enhancing features that power modern communication systems. Worked on implementing Voice over IP (VoIP) functionalities, call routing logic, Interactive Voice Response (IVR) systems, and call analytics.

Contributed to the development of RESTful APIs for telephony operations, enabling integration with third-party applications and CRM systems. Implemented real-time call monitoring dashboards, call recording systems, and comprehensive reporting tools that provide businesses with insights into their communication patterns.

Optimized performance of high-throughput telephony services, ensuring low latency and high availability for mission-critical business communications. Worked with WebRTC technologies to enable browser-based calling without requiring plugins or additional software.

Network Quality Analyzer - Desktop Application

Developed a cross-platform desktop application using Electron.js to evaluate and analyze network connectivity quality for clients connecting to ACH servers. The application performs comprehensive network diagnostics including latency measurements, upload/download speed tests, packet loss analysis, and jitter detection.

The tool provides detailed visualizations of network performance over time, helping identify patterns and issues that could affect service quality. Implemented automated testing schedules that run diagnostics at specified intervals, collecting historical data for trend analysis and capacity planning.

The application generates professional PDF reports containing all metrics, graphs, and recommendations, which can be shared with stakeholders or used for internal troubleshooting. The reports include comparisons against baseline standards and highlight any deviations that require attention, making it easier for support teams to diagnose connectivity issues.

OpenStack & Ceph Monitoring - Infrastructure Observability

Designed and implemented a comprehensive monitoring and alerting solution for OpenStack cloud infrastructure and Ceph storage clusters. The project involved collecting, aggregating, and visualizing infrastructure metrics using the Elastic Stack (ELK - Elasticsearch, Logstash, Kibana), Prometheus, and Grafana.

Built custom dashboards displaying real-time metrics for compute nodes, storage nodes, network components, and virtualized resources. Created alerts for critical conditions such as high CPU/memory usage, disk space exhaustion, network anomalies, and service failures, ensuring proactive incident response.

Implemented Elastic SIEM (Security Information and Event Management) for security monitoring, detecting suspicious activities, unauthorized access attempts, configuration changes, and potential security breaches. The SIEM correlates logs from multiple sources to identify complex attack patterns and provides automated response workflows.

The monitoring infrastructure provides comprehensive visibility into both infrastructure health and security posture, enabling the operations team to maintain high availability while ensuring compliance with security policies and regulations.