IBM TIM / TAM / LDAP Administrator

IBM TIM / TAM / LDAP Administrator

Summary:

Identity and Access Management (IAM) professional with 8 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.

Roles & Responsibilities:

• Administered and supported IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management.

• Managed complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination.

• Supported automated and manual user provisioning/de-provisioning across multiple target applications and systems.

• Configured and maintained TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.

• Monitored provisioning requests and investigated failed or pending account provisioning activities.

• Troubleshot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.

• Supported and maintained IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.

• Administered TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.

• Created and maintained WebSEAL junctions for secured backend web applications.

• Configured authentication and authorization policies based on application security requirements.

• Troubleshot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues.

• Managed LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.

• Performed LDAP searches, updates, imports, and exports using LDAP administrative utilities.

• Managed LDAP groups and access permissions based on application and business requirements.

• Supported LDAP replication and monitored directory server availability and synchronization.

• Configured and maintained secure LDAP/LDAPS connections using SSL/TLS certificates.

• Managed certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.

• Supported integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.

• Performed application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.

• Analyzed application and system logs to identify IAM authentication and provisioning failures.

• Worked on password policies, account lockout policies, authentication policies, and role-based access control (RBAC).

• Provided L2/L3 production support for critical IAM applications.

Technical Skills:

Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM)

Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL

Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS

Application Server: IBM WebSphere Application Server

Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores

IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management

Operating Systems: Linux/Unix, Windows

Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities

Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting

Pay Transparency Laws in some locations require disclosure of compensation and/or benefits-related information.  For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $98,291 - $127,650.