LDAP Administrator

Conduent•Florham Park, NJ

3d•$98,291 - $127,650

About The Position

The IBM TIM / TAM / LDAP Administrator is an Identity and Access Management (IAM) professional with hands-on experience administering IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. The role supports identity lifecycle management, user provisioning, access control, LDAP administration, authentication, security integration, troubleshooting, and production support in enterprise environments. The administrator manages TIM services and user identity lifecycles, supports provisioning across target applications, and configures policies, workflows, roles, and access controls. The role also supports TAM and WebSEAL security services, LDAP directory operations and replication, secure connections and certificates, and WebSphere integrations. It includes application-server monitoring and troubleshooting, log analysis, and L2/L3 production support for critical IAM applications.

Requirements

8 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server.
Experience with identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support.
Experience administering IBM TIM/ITIM, IBM TAM/ISAM, WebSEAL, IBM Security Directory Server (SDS/TDS), LDAP/LDAPS, and IBM WebSphere Application Server.
Experience with authentication, authorization, RBAC, SSO, SSL/TLS, certificates, keystores, and truststores.
Experience with user provisioning and de-provisioning, reconciliation, password management, access management, and identity lifecycle management.
Experience with Linux/Unix and Windows.
Experience with shell scripting, LDAP utilities, and IBM administrative utilities.
Experience with production support, incident management, problem management, change management, and troubleshooting.

Responsibilities

Administer and support IBM Tivoli Identity Manager (TIM/ITIM) environments.
Manage the user identity lifecycle, including user creation, modification, suspension, restoration, password resets, and account termination.
Support automated and manual user provisioning and de-provisioning across target applications and systems.
Configure and maintain TIM services, provisioning and adoption policies, workflows, roles, and access controls.
Monitor provisioning requests and investigate failed or pending account provisioning activities.
Troubleshoot TIM account synchronization, reconciliation, provisioning policy, adapter, workflow, and LDAP connectivity issues.
Support and maintain IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.
Administer TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.
Create and maintain WebSEAL junctions for secured backend web applications.
Configure authentication and authorization policies according to application security requirements.
Troubleshoot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues.
Manage LDAP directory users, groups, organizational units, attributes, object classes, and entries.
Perform LDAP searches, updates, imports, and exports using administrative utilities.
Manage LDAP groups and access permissions according to application and business requirements.
Support LDAP replication and monitor directory server availability and synchronization.
Configure and maintain secure LDAP/LDAPS connections using SSL/TLS certificates.
Manage certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.
Support integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.
Perform application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.
Analyze application and system logs to identify IAM authentication and provisioning failures.
Work on password, account lockout, and authentication policies, as well as role-based access control (RBAC).
Provide L2/L3 production support for critical IAM applications.