IBM TIM / TAM / LDAP Administrator

Summary:

Identity and Access Management (IAM) professional with 8 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.

Roles & Responsibilities:

• Administered and supported IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management.
• Managed complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination.
• Supported automated and manual user provisioning/de-provisioning across multiple target applications and systems.
• Configured and maintained TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.
• Monitored provisioning requests and investigated failed or pending account provisioning activities.
• Troubleshot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.
• Supported and maintained IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.
• Administered TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.
• Created and maintained WebSEAL junctions for secured backend web applications.
• Configured authentication and authorization policies based on application security requirements.
• Troubleshot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues.
• Managed LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.
• Performed LDAP searches, updates, imports, and exports using LDAP administrative utilities.
• Managed LDAP groups and access permissions based on application and business requirements.
• Supported LDAP replication and monitored directory server availability and synchronization.
• Configured and maintained secure LDAP/LDAPS connections using SSL/TLS certificates.
• Managed certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.
• Supported integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.
• Performed application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.
• Analyzed application and system logs to identify IAM authentication and provisioning failures.
• Worked on password policies, account lockout policies, authentication policies, and role-based access control (RBAC).
• Provided L2/L3 production support for critical IAM applications.

Technical Skills:

• Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM)
• Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL
• Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS
• Application Server: IBM WebSphere Application Server
• Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores
• IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management
• Operating Systems: Linux/Unix, Windows
• Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities
• Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting

Pay Transparency Laws in some locations require disclosure of compensation and/or benefits-related information. For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $98,291 - $127,650.

Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments - creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is noticed and valued every day.

Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law.

For US applicants: People with disabilities who need a reasonable accommodation to apply for or compete for employment with Conduent may request such accommodation(s) by submitting their request through this form that must be downloaded: click here to access or download the form https://downloads.conduent.com/content/usa/en/file/conduent-applicant-adaaa-referral-form.pdf. Complete the form and then email it as an attachment to FTADAAA@conduent.com. You may also click here to access Conduent's ADAAA Accommodation Policy http://downloads.conduent.com/content/usa/en/document/cdt_adaaa_accommodation_pol.pdf.