TIM/TAM/LDAP Administrator

This is a fully remote position, open to applicants in New Jersey.

📋 Description

• Oversee and support IBM Tivoli Identity Manager environments for enterprise identity and access management.

• Manage the entire user identity lifecycle, encompassing creation, modification, suspension, restoration, password resets, and account terminations.

• Facilitate both automated and manual user provisioning and de-provisioning across various target applications and systems.

• Configure and sustain TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.

• Monitor provisioning requests and investigate any failed or pending account provisioning activities.

• Diagnose TIM account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity problems.

• Support and maintain IBM Tivoli Access Manager for authentication, authorization, and web access security.

• Administer TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.

• Create and manage WebSEAL junctions for secured backend web applications.

• Configure authentication and authorization policies that align with application security requirements.

• Troubleshoot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization challenges.

• Manage LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.

• Execute LDAP searches, updates, imports, and exports utilizing administrative tools.

• Manage LDAP groups and access permissions according to application and business needs.

• Support LDAP replication and monitor the availability and synchronization of directory servers.

• Configure and maintain secure LDAP/LDAPS connections using SSL/TLS certificates.

• Oversee certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.

• Assist with the TIM/TAM integration with IBM WebSphere Application Server and enterprise applications.

• Conduct application server start/stop operations, JVM monitoring, log analysis, and configuration troubleshooting.

• Analyze application and system logs to identify IAM authentication and provisioning failures.

• Collaborate on password policies, account lockout policies, authentication policies, and role-based access control.

• Provide L2/L3 production support for critical IAM applications.

⛳️ Requirements

• 8 years of practical experience with IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server.

• Proficiency in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and enterprise production support.

• Experience in administering IBM Tivoli Identity Manager (TIM/ITIM) and IBM Security Identity Manager (ISIM).

• Familiarity with supporting IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), and WebSEAL.

• Experience with IBM Security Directory Server (SDS/TDS), LDAP, and LDAPS.

• Background in working with IBM WebSphere Application Server.

• Understanding of authentication, authorization, RBAC, SSO, SSL/TLS, certificates, keystores, and truststores.

• Proficient in Linux/Unix and Windows environments.

• Experience with shell scripting, LDAP utilities, and IBM administrative tools.

• Background in production support, incident management, problem management, change management, and troubleshooting.

🏝️ Benefits

• Health insurance coverage.

• Voluntary dental and vision programs.

• Life and disability insurance.

• Retirement savings plan.

• Paid holidays.

• Paid time off (PTO) or vacation and/or sick time.

• Potential bonus or incentive based on business need.