Infrastructure Systems Engineer III

Identity and Access Management (IAM) professional with 5 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.

Roles & Responsibilities

• Administer and support IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management.
• Manage complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination.
• Support automated and manual user provisioning/de-provisioning across multiple target applications and systems.
• Configure and maintain TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.
• Monitor provisioning requests and investigate failed or pending account provisioning activities.
• Troubleshoot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.
• Support and maintain IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.
• Administer TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.
• Create and maintain WebSEAL junctions for secured backend web applications.
• Configure authentication and authorization policies based on application security requirements.
• Troubleshoot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues.
• Manage LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.
• Perform LDAP searches, updates, imports, and exports using LDAP administrative utilities.
• Manage LDAP groups and access permissions based on application and business requirements.
• Support LDAP replication and monitored directory server availability and synchronization.
• Configure and maintain secure LDAP/LDAPS connections using SSL/TLS certificates.
• Manage certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.
• Support integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.
• Perform application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.
• Analyze application and system logs to identify IAM authentication and provisioning failures.
• Work on password policies, account lockout policies, authentication policies, and role-based access control (RBAC).
• Provide on call L2/L3 production support for critical IAM applications.
• Willing to work after hours to support clients' production maintenance windows.

Technical Skills

• Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM)
• Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL
• Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS
• Application Server: IBM WebSphere Application Server
• Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores
• IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management
• Operating Systems: Linux/Unix, Windows
• Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities
• Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting

Education

• Bachelor’s degree in computer science, Information Technology, Engineering, or a related field, or equivalent professional experience.