IBM TIM / TAM / LDAP Administrator

Conduent; Oregon; Hybrid; USD 98,000 - 128,000; Full time

Benefits offered by this job

Health insurance

Dental & Vision

Retirement plan

Paid time off

Job summary

Conduent, Inc. is seeking an IBM TIM/TAM/LDAP administrator with extensive IAM experience to lead identity lifecycle management and provisioning for enterprise applications.

The role covers TIM/ITIM, TAM/ISAM, WebSEAL, and LDAP directory services, with production support across Linux/Unix and Windows environments. The ideal candidate will troubleshoot provisioning failures, manage certificates, and ensure secure authentication and authorization policies.

Qualifications

• 8 years of hands-on IAM experience.
• Expertise with TIM/ITIM and TAM/ISAM.
• Proficient in LDAP/LDAPS administration.

Responsibilities

• Administer TIM/ITIM environments for enterprise IAM.
• Manage user identity lifecycle and provisioning workflows.
• Configure and maintain TIM services, policies, and adapters.
• Troubleshoot TIM, TLS/SSL, and LDAP connectivity.
• Administer TAM/ISAM for authentication and web access.
• Maintain WebSEAL and protected objects.
• Manage LDAP directory services and certificates.
• Provide L2/L3 production support for IAM apps.

Skills

Identity management

Access management

RBAC

Troubleshooting

Production support

Tools

TIM/ITIM

TAM/ISAM

LDAP / LDAPS

WebSphere

SDS/TDS

Job description

IBM TIM / TAM / LDAP Administrator

Summary:Identity and Access Management (IAM) professional with 8 years of hands‑on experience in IBM Tivoli Identity Manager (TIM), IBM Tivoli Access Manager (TAM), IBM Security Directory Server/LDAP, and WebSphere Application Server. Experienced in identity lifecycle management, user provisioning, access control, LDAP administration, authentication, troubleshooting, security integration, and production support in enterprise environments.

Roles & Responsibilities

• Administered and supported IBM Tivoli Identity Manager (TIM/ITIM) environments for enterprise identity and access management.
• Managed complete user identity lifecycle, including user creation, modification, suspension, restoration, password reset, and account termination.
• Supported automated and manual user provisioning/de-provisioning across multiple target applications and systems.
• Configured and maintained TIM services, provisioning policies, adoption policies, workflows, roles, and access controls.
• Monitored provisioning requests and investigated failed or pending account provisioning activities.
• Troubleshot TIM issues related to account synchronization, reconciliation, provisioning policies, adapters, workflows, and LDAP connectivity.
• Supported and maintained IBM Tivoli Access Manager (TAM/ISAM) for authentication, authorization, and web access security.
• Administered TAM Policy Server, WebSEAL, authorization services, junctions, ACLs, POPs, and protected objects.
• Created and maintained WebSEAL junctions for secured backend web applications.
• Configured authentication and authorization policies based on application security requirements.
• Troubleshot WebSEAL authentication, junction connectivity, access‑denied, session, SSL/TLS, and authorization issues.
• Managed LDAP directory services, including users, groups, organizational units, attributes, object classes, and directory entries.
• Performed LDAP searches, updates, imports, and exports using LDAP administrative utilities.
• Managed LDAP groups and access permissions based on application and business requirements.
• Supported LDAP replication and monitored directory server availability and synchronization.
• Configured and maintained secure LDAP/LDAPS connections using SSL/TLS certificates.
• Managed certificates, truststores, keystores, and certificate renewals for TIM, TAM, LDAP, and WebSphere environments.
• Supported integration of TIM/TAM with IBM WebSphere Application Server and enterprise applications.
• Performed application server start/stop, JVM monitoring, log analysis, and configuration troubleshooting.
• Analyzed application and system logs to identify IAM authentication and provisioning failures.
• Worked on password policies, account lockout policies, authentication policies, and role‑based access control (RBAC).
• Provided L2/L3 production support for critical IAM applications.

Technical Skills

Identity Management: IBM Tivoli Identity Manager (TIM/ITIM), IBM Security Identity Manager (ISIM)

Access Management: IBM Tivoli Access Manager (TAM), IBM Security Access Manager (ISAM), WebSEAL

Directory Services: IBM Security Directory Server (SDS/TDS), LDAP, LDAPS

Application Server: IBM WebSphere Application Server

Security: Authentication, Authorization, RBAC, SSO, SSL/TLS, Certificates, Keystores, Truststores

IAM Operations: User Provisioning, De-provisioning, Reconciliation, Password Management, Access Management, Identity Lifecycle Management

Operating Systems: Linux/Unix, Windows

Scripting/Tools: Shell Scripting, LDAP utilities, IBM administrative utilities

Support: Production Support, Incident Management, Problem Management, Change Management, Troubleshooting

Pay Transparency Laws in some locations require disclosure of compensation and/or benefits‑related information. For this position, actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation and/or sick time. The estimated salary range for this role is $98,291 - $127,650.

Through our dedicated associates, Conduent delivers mission‑critical services and solutions on behalf of Fortune 100 companies and over 500 governments - creating exceptional outcomes for our clients and the millions of people who count on them. You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is noticed and valued every day.

Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law.

For US applicants: People with disabilities who need a reasonable accommodation to apply for or compete for employment with Conduent may request such accommodation(s) by submitting their request through this form that must be downloaded: click here to access or download the form. Complete the form and then email it as an attachment to . You may also click here to access Conduent's ADAAA Accommodation Policy.