Projects we have delivered.

Enterprise-wide SSO and MFA for a mobile operator

A national mobile operator with dozens of enterprise applications, each with its own credentials. Employees managed many passwords; the helpdesk was overwhelmed with reset requests. We designed and implemented Okta-based IAM that federates every application under one SSO, with adaptive MFA and automated provisioning, through a phased migration with no operational disruption.

Scope

• IAM architecture and policy model
• SAML and OIDC application federation
• Adaptive MFA
• SCIM provisioning
• Phased migration per business unit

Technologies

OktaSAML 2.0SCIMLDAPAzure AD

IoT-based branch security system

A regional bank with hundreds of branches across Java and Sumatra still relied on physical keys, with no audit trail for server rooms and vaults. We installed NFC smart locks across all branches, integrated with the bank's Active Directory for identity synchronization. Every access event is logged in real time to a central dashboard with automatic alerts for unauthorized attempts.

Scope

• NFC smart locks across all branches
• Identity integration with Active Directory
• Central monitoring dashboard
• Unauthorized access alerts

Technologies

NFCMQTTActive DirectoryREST APIReact

Managed service for critical telecommunications infrastructure

A multinational operating critical telecommunications infrastructure in Indonesia needed a managed service partner for 24/7 operations with SLA commitments to enterprise customers. We took over full NOC operations, introduced an ITIL-based service management framework, proactive monitoring with anomaly detection, and a dedicated incident response team.

Scope

• 24/7 NOC operations
• ITIL service management framework
• Proactive monitoring and anomaly detection
• Incident response team

Technologies

ZabbixGrafanaITILServiceNowPython

SIEM and security operations across subsidiaries

An Indonesian conglomerate with a dozen subsidiaries had no central visibility into security events. Point solutions generated thousands of alerts a day with no correlation. We designed and deployed a unified SIEM platform ingesting logs from every subsidiary, tuned detection rules, built dashboards for the security team, and trained an in-house SOC team to run it.

Scope

• SIEM architecture and deployment
• Log ingestion from all subsidiaries
• Detection rule tuning
• Security team dashboards
• SOC team training

Technologies

SplunkElastic SIEMPalo AltoFortinetPython