Infrastructure Systems Engineer III

Identity and Access Management (IAM) professional with 5 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and Web. Sphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.

Roles & Responsibilities Administer and support IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management. Manage complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination. Support automated and manual user provisioning/de-provisioning across multiple target applications and systems.

Configure and maintain TIM services, provisioning policies, adoption policies, workflows, roles, and access controls. Monitor provisioning requests and investigate failed or pending account provisioning activities. Troubleshoot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.

Support and maintain IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security. Administer TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects. Create and maintain WebSEAL junctions for secured backend web applications. Configure authentication and authorization policies based on application security requirements.

Troubleshoot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues. Manage LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries. Perform LDAP searches, updates, imports, and exports using LDAP administrative utilities.

Manage LDAP groups and access permissions based on application and business requirements. Support LDAP replication and monitored directory server availability and synchronization. Configure and maintain secure LDAP/LDAPS connections using SSL/TLS certificates. Manage certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and Web.

Sphere environments. Support integration of TIM/TAM with IBM Web. Sphere Application Server and enterprise applications. Perform application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting. Analyze application and system logs to identify IAM authentication and provisioning failures. Work on password policies, account lockout policies, authentication policies, and role-based access control (RBAC).

Provide on call L2/L3 production support for critical IAM applications. Willing to work after hours to support clients' production maintenance windows. Technical Skills Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM) Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS Application Server: IBM Web.

Sphere Application Server Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management Operating Systems: Linux/Unix, Windows Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting Education Bachelor’s degree in computer science, Information Technology, Engineering, or a related field, or equivalent professional experience.