Job Description:
• Administer and support IBM Tivoli Identity Manager environments for enterprise identity and access management
• Manage the complete user identity lifecycle, including creation, modification, suspension, restoration, password reset, and account termination
• Support automated and manual user provisioning and de-provisioning across target applications and systems
• Configure and maintain TIM services, provisioning policies, adoption policies, workflows, roles, and access controls
• Monitor provisioning requests and investigate failed or pending account provisioning activities
• Troubleshoot TIM account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity issues
• Support and maintain IBM Tivoli Access Manager for authentication, authorization, and web access security
• Administer TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects
• Create and maintain WebSEAL junctions for secured backend web applications
• Configure authentication and authorization policies based on application security requirements
• Troubleshoot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues
• Manage LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries
• Perform LDAP searches, updates, imports, and exports using administrative utilities
• Manage LDAP groups and access permissions based on application and business requirements
• Support LDAP replication and monitor directory server availability and synchronization
• Configure and maintain secure LDAP/LDAPS connections using SSL/TLS certificates
• Manage certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments
• Support TIM/TAM integration with IBM WebSphere Application Server and enterprise applications
• Perform application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting
• Analyze application and system logs to identify IAM authentication and provisioning failures
• Work on password policies, account lockout policies, authentication policies, and role-based access control
• Provide L2/L3 production support for critical IAM applications
Requirements:
• 8 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server
• Experience with identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and enterprise production support
• Experience administering IBM Tivoli Identity Manager (TIM/ITIM) and IBM Security Identity Manager (ISIM)
• Experience supporting IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), and WebSEAL
• Experience with IBM Security Directory Server (SDS/TDS), LDAP, and LDAPS
• Experience with IBM WebSphere Application Server
• Knowledge of authentication, authorization, RBAC, SSO, SSL/TLS, certificates, keystores, and truststores
• Experience with Linux/Unix and Windows
• Shell scripting, LDAP utilities, and IBM administrative utilities
• Production support, incident management, problem management, change management, and troubleshooting
Benefits:
• Health insurance coverage
• Voluntary dental and vision programs
• Life and disability insurance
• Retirement savings plan
• Paid holidays
• Paid time off (PTO) or vacation and/or sick time
• Potential bonus or incentive based on business need