Thank you for sharing the solution with Apigee community, I am sure it will be helpful for others.
Just to add,
Lockout an account after n number of attempts
As you said, It’s available out of the box & it’s called flood control. You can configure same by navigating to “admin/config/system/flood-control” . See attached screenshot below.