IBM TIM / TAM / LDAP Administrator
IBM TIM/TAM/LDAP 管理员简介：身份和访问管理 (IAM) 专业人员，在 IBM Tivoli Identity Manager (TIM),IBM Tivoli Access Manager (TAM),IBM Security Directory Server/LDAp 和 WebSphere Application Server 方面拥有8年的实践经验。在企业环境中具有身份生命周期管理，用户配置，访问控制，LDAP 行政，认证，故障排除，安全集成以及生产支持的经验。角色和责任：·为企业身份和访问处理提供管理和支持的 IBM Tivoli Identification Manager (TIME/ITIM) 环境。· 管理用户身份的完整生命周期，包括用户创建，修改，暂停，恢复，密码重置和帐户终止。· 在多个目标应用程序和系统中支持自动化和手动的用户配置/卸载服务。· 配置和维护 TIM 服务，提供政策，采用策略，工作流程，角色和访问控制。·监测了供应请求并调查了未完成或正在进行的账户配置活动。·与帐户同步，调整，提供策略，适配器，工作流以及 LDAP 连接有关的 TIM 问题。· 支持和维护 IBM Tivoli Access Manager (TAM/ISAM) 为验证，授权和网络访问安全。·管理 TAM Policy Server,WebSEAL,授权服务，接口，ACLs,POPs 和受保护的对象。·为安全后端网应用程序创建和维护 WebSEAL 接口。·根据应用程序安全要求配置了验证和授权政策。· Troubleshot WebSEAL 认证，接口连接，拒绝访问，会议，SSL/TLS 以及授权问题。·管理 LDAP 目录服务，包括用户，组件，组织单位，属性，对象类和目录输入。· 通过 LDAP 管理工具进行了 LDAP 搜索，更新，进口和出口。·基于应用程序和业务要求管理 LDAP 组和访问权限。·支持 LDAP 复制以及监测目录服务器可用性和同步。·使用 SSL/TLS 证书配置和维护安全的 LDAP/LDAPS 连接。·为 TIM,TAM,LDAP 和 WebSphere 环境管理证书，信托商店，键盘商店和证书续订。·支持 TIme/TAM 与 IBM WebSphere Apphere 集成。
查看英文原文
IBM TIM / TAM / LDAP Administrator
Summary:
Identity and Access Management (IAM) professional with 8 years of hands-on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.
Roles & Responsibilities:
- Administered and supported IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management.
- Managed complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination.
- Supported automated and manual user provisioning/de-provisioning across multiple target applications and systems.
- Configured and maintained TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.
- Monitored provisioning requests and investigated failed or pending account provisioning activities.
- Troubleshot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.
- Supported and maintained IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.
- Administered TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.
- Created and maintained WebSEAL junctions for secured backend web applications.
- Configured authentication and authorization policies based on application security requirements.
- Troubleshot WebSEAL authentication, junction connectivity, access-denied, session, SSL/TLS, and authorization issues.
- Managed LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.
- Performed LDAP searches, updates, imports, and exports using LDAP administrative utilities.
- Managed LDAP groups and access permissions based on application and business requirements.
- Supported LDAP replication and monitored directory server availability and synchronization.
- Configured and maintained secure LDAP/LDAPS connections using SSL/TLS certificates.
- Managed certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.
- Supported integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.
- Performed application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.
- Analyzed application and system logs to identify IAM authentication and provisioning failures.
- Worked on password policies, account lockout policies, authentication policies, and role-based access control (RBAC).
- Provided L2/L3 production support for critical IAM applications.
Technical Skills:
Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM)
Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL
Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS
Application Server: IBM WebSphere Application Server
Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores
IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management
Operating Systems: Linux/Unix, Windows
Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities
Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting
Pay Transparency Laws in some locations require disclosure of compensation and/or benefits-related information. For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $98,291 - $127,650.
Originally posted on Himalayas