DataPower Administrator (SSL, Network and Operating Systems)

Sasso Consulting; Johannesburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Job summary

Sasso Consulting is seeking experienced IBM DataPower Administrators to design, implement and support DataPower Gateway environments in a complex enterprise IT landscape in Gauteng. The role emphasizes security, availability and performance, with emphasis on SSL/TLS, PKI, and certificate management.

You'll work closely with middleware, network and security teams to ensure reliable API gateways, web services and enterprise integration. The contract is for 3 years and offers hybrid work options.

Qualifications

• Typically 3+ years of hands-on IBM DataPower administration.
• Strong understanding of SSL/TLS and PKI.
• Experience with enterprise security and API gateways.
• Familiarity with Linux/Windows Server in enterprise environments.

Responsibilities

• Install, configure, and maintain IBM DataPower Gateway environments.
• Manage SSL/TLS certificates and PKI lifecycle.
• Configure domains, MPGW, web service proxies and API gateways.
• Monitor performance and ensure high availability.
• Collaborate with security and network teams.

Skills

IBM DataPower Gateway

DataPower administration

SSL/TLS

PKI

Networking protocols

High availability

Linux

Windows Server

API gateway

Web services

Education

Diploma or degree in IT

Tools

DataPower appliances

VMware

IBM API Connect

Job description

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

Job Overview

We are seeking experienced and technically proficient IBM DataPower Administrators to implement, configure, administer, secure, monitor and support IBM DataPower Gateway environments within complex enterprise IT infrastructures. The successful candidates will be responsible for ensuring the availability, security, reliability and performance of enterprise integration gateways, including SSL/TLS certificate management, network connectivity, appliance administration, operating system integration and API security. This role requires substantial hands‑on experience with IBM DataPower Gateway, SSL/TLS, PKI, digital certificates, network protocols, enterprise security controls, gateway troubleshooting and production support. The ideal candidates will have proven experience supporting IBM DataPower appliances or virtual deployments within large enterprise environments, including secure application integration, web services, API traffic management, certificate lifecycle administration and high‑availability configurations. Candidates must understand the interaction between DataPower gateway services, enterprise networks, backend applications, operating systems and cybersecurity infrastructure. The position involves collaboration with middleware engineers, integration architects, network specialists, cybersecurity teams, systems administrators, application developers and infrastructure operations teams.

This is a specialist IBM DataPower administration role. General network administration, Linux support, API development or middleware experience without substantial hands‑on IBM DataPower expertise will not be sufficient.

Key Responsibilities

IBM DataPower Administration and Configuration

• Install, configure, administer and maintain IBM DataPower Gateway environments.
• Support physical, virtual or container‑based DataPower deployments where applicable.
• Configure and manage DataPower domains, services and operational settings.
• Administer Multi‑Protocol Gateways (MPGW), Web Service Proxies and API Gateway services.
• Manage service configurations, processing policies and routing rules.
• Configure gateway objects, network interfaces and backend connectivity.
• Support DataPower firmware updates, maintenance and patching.
• Perform configuration backups, restores and environment migrations.
• Maintain configuration consistency across development, testing and production environments.
• Ensure DataPower platforms remain secure, stable and operational.

SSL/TLS and Certificate Management

• Configure and maintain SSL/TLS security on IBM DataPower gateways.
• Administer digital certificates, private keys and trust stores.
• Manage certificate signing requests, renewals, replacements and revocations.
• Configure SSL proxy profiles, crypto profiles and related security objects.
• Implement mutual TLS (mTLS) authentication where required.
• Configure certificate‑based authentication for frontend and backend services.
• Troubleshoot SSL handshakes, certificate chain failures and trust issues.
• Maintain secure cipher suites and supported TLS protocol configurations.
• Coordinate certificate lifecycle activities with enterprise PKI and security teams.
• Monitor certificate expiry and proactively prevent service interruptions.

Network Configuration and Connectivity

• Configure DataPower network interfaces, IP addressing and routing.
• Support DNS, TCP/IP, HTTP, HTTPS and related network protocols.
• Configure and troubleshoot gateway connectivity to backend services.
• Support firewall rule requirements and network access controls.
• Investigate routing failures, timeouts, connection resets and network latency.
• Configure load balancing and service endpoint connectivity.
• Support high‑availability network configurations and failover.
• Work with network engineers to resolve connectivity incidents.
• Analyse network traffic and connectivity logs.
• Maintain accurate network configuration and integration documentation.

Operating System and Infrastructure Integration

• Support DataPower integration with Linux, Windows Server and enterprise application environments.
• Understand DataPower's appliance‑based operating environment and administration interfaces.
• Troubleshoot connectivity between DataPower gateways and backend operating systems.
• Support virtual appliance infrastructure and associated hypervisor environments.
• Coordinate operating system, network and infrastructure changes affecting DataPower.
• Assist with DNS, time synchronisation and supporting infrastructure configuration.
• Monitor appliance resource utilisation and operational health.
• Support infrastructure upgrades and environment migrations.
• Work with systems administrators to resolve backend service availability issues.
• Ensure gateway configurations align with infrastructure security standards.

API Gateway and Web Services Administration

• Configure and support API gateway services.
• Administer SOAP and REST‑based integrations.
• Configure HTTP and HTTPS service endpoints.
• Support XML and JSON message processing.
• Configure authentication, authorisation and traffic control policies.
• Support API security, rate limiting and access restrictions.
• Troubleshoot API routing, transformation and service errors.
• Maintain service‑level configurations and integration policies.
• Support gateway integration with enterprise API management platforms.
• Collaborate with application and integration teams on service deployment.

Security Configuration and Hardening

• Implement secure gateway configuration standards.
• Configure authentication and access control mechanisms.
• Support LDAP, Active Directory and certificate‑based authentication.
• Apply role‑based administrative access controls.
• Configure encryption, digital signatures and secure communication channels.
• Support protection against common web service and API security threats.
• Maintain secure management interfaces and administrative access.
• Review gateway security settings and identify vulnerabilities.
• Support security audits, remediation and compliance requirements.
• Collaborate with cybersecurity teams on gateway hardening.

Monitoring, Logging and Incident Management

• Monitor IBM DataPower appliance health and service availability.
• Review system logs, error reports and service monitoring information.
• Investigate failed transactions, gateway errors and connectivity issues.
• Troubleshoot SSL/TLS failures, routing problems and backend timeouts.
• Identify performance bottlenecks and resource constraints.
• Configure logging and monitoring integrations where applicable.
• Support incident investigation and root cause analysis.
• Escalate complex product issues to IBM or specialist support teams.
• Maintain accurate incident records and technical findings.
• Restore affected services in accordance with operational priorities.

Performance Optimisation and Capacity Management

• Monitor gateway throughput, latency and resource utilisation.
• Identify performance issues affecting application integration.
• Optimise service policies and processing configurations.
• Review connection management and timeout settings.
• Support capacity planning and infrastructure scaling.
• Evaluate gateway performance under high transaction volumes.
• Recommend improvements to routing and processing efficiency.
• Assist with performance and resilience testing.
• Identify recurring service bottlenecks.
• Maintain gateway performance documentation.

High Availability and Disaster Recovery

• Configure and support resilient DataPower deployments.
• Understand gateway redundancy, load balancing and failover requirements.
• Support configuration synchronisation and environment consistency.
• Maintain configuration backup and recovery procedures.
• Participate in disaster recovery planning and testing.
• Support service restoration following infrastructure incidents.
• Identify single points of failure affecting gateway availability.
• Coordinate recovery activities with infrastructure and application teams.
• Validate gateway services after failover or recovery events.
• Recommend improvements to gateway resilience.

Change Management and Deployment Support

• Implement approved DataPower configuration changes.
• Support deployment of gateway services and processing policies.
• Maintain configuration versioning and change documentation.
• Conduct pre‑deployment validation and post‑deployment testing.
• Support certificate changes and endpoint migrations.
• Coordinate deployments with application, network and security teams.
• Follow approved maintenance windows and change control procedures.
• Prepare rollback plans for critical configuration changes.
• Troubleshoot issues arising from deployments.
• Ensure changes comply with organisational governance standards.

Technical Documentation and Operational Governance

• Maintain accurate DataPower configuration documentation.
• Document SSL/TLS profiles, certificates and security settings.
• Maintain network connectivity and service routing diagrams.
• Develop operational procedures and troubleshooting guides.
• Document backup, restore and recovery processes.
• Support technical audits and compliance assessments.
• Maintain records of gateway changes and incidents.
• Share technical knowledge with support and engineering teams.
• Recommend improvements to gateway administration practices.
• Ensure adherence to enterprise security and operational standards.

Minimum Requirements

• Relevant diploma or degree in Information Technology, Computer Science, Network Engineering, Systems Engineering or a related technical discipline.
• Typically 4–6+ years of relevant enterprise infrastructure, middleware or integration administration experience.
• Typically 3+ years of substantial hands‑on IBM DataPower administration experience.
• Practical IBM DataPower Gateway administration experience—essential.
• Proven experience configuring, maintaining and troubleshooting DataPower services.
• Strong understanding of SSL/TLS protocols and secure communications.
• Practical experience managing digital certificates, private keys and trust stores.
• Knowledge of Public Key Infrastructure (PKI) and certificate lifecycle management.
• Strong understanding of TCP/IP, DNS, HTTP, HTTPS and enterprise networking.
• Experience troubleshooting network connectivity and backend service communication.
• Experience with SOAP, REST, XML and JSON‑based integrations.
• Knowledge of API gateway and web service security principles.
• Understanding of Linux, Windows Server and enterprise operating system environments.
• Experience supporting high‑availability and mission‑critical infrastructure.
• Strong troubleshooting skills involving gateway, network and SSL‑related incidents.
• Familiarity with monitoring, logging and incident management tools.
• Understanding of enterprise change management and ITIL principles.
• Experience working with network, security, infrastructure and integration teams.
• Ability to maintain detailed technical configuration and operational documentation.
• Experience supporting production environments with strict availability and security requirements.

Technical Skills and Competencies

IBM DataPower Technologies

• IBM DataPower Gateway
• IBM DataPower physical and virtual appliances
• DataPower domains
• Multi‑Protocol Gateway (MPGW)
• Web Service Proxy
• API Gateway services
• DataPower processing policies
• Service routing and transformation
• DataPower CLI
• DataPower WebGUI
• XML Management Interface
• Gateway configuration backup and restore
• Firmware management
• DataPower logging and diagnostics

SSL/TLS and Cryptographic Security

• SSL/TLS configuration
• TLS 1.2 and TLS 1.3 concepts
• Mutual TLS authentication
• X.509 digital certificates
• Certificate Signing Requests (CSR)
• Certificate Authorities
• Public Key Infrastructure
• Private key management
• Trust stores
• Key stores
• Crypto profiles
• SSL proxy profiles
• Certificate chain validation
• Cipher suites
• Certificate renewal and expiry management
• SSL handshake troubleshooting

Networking and Connectivity

• TCP/IP
• DNS
• HTTP/HTTPS
• IP addressing and subnetting
• Network routing
• VLAN awareness
• Firewalls
• Load balancers
• Reverse proxies
• Network access controls
• Network connectivity testing
• Backend service connectivity
• Network latency and timeout troubleshooting
• High‑availability networking

Operating Systems and Infrastructure

• Linux fundamentals
• Windows Server fundamentals
• Enterprise server infrastructure
• Virtual appliance environments
• VMware awareness
• Network interface configuration
• DNS and time synchronisation
• Infrastructure monitoring
• Systems integration
• Infrastructure patching and change management

API and Integration Technologies

• REST APIs
• SOAP web services
• XML
• JSON
• XSLT
• XPath
• HTTP headers
• Authentication and authorisation
• API security
• Service transformation
• Message routing
• Backend integration
• Web service troubleshooting
• IBM API Connect integration (advantageous)

Security and Identity Integration

• LDAP
• Microsoft Active Directory
• Certificate‑based authentication
• OAuth 2.0 awareness
• OpenID Connect awareness
• SAML awareness
• Role‑based access control
• Secure administrative access
• Encryption
• Digital signatures
• API security policies
• Security hardening
• Vulnerability remediation

Monitoring and Operational Tools

• DataPower system logs
• Error reports and diagnostics
• IBM support and diagnostic utilities
• Splunk
• IBM QRadar
• PRTG
• SolarWinds
• ServiceNow
• Other enterprise monitoring platforms
• Incident management
• Root cause analysis
• Performance monitoring
• Capacity management

Operational Frameworks

• ITIL
• Incident management
• Problem management
• Change management
• Configuration management
• Disaster recovery
• Business continuity
• Infrastructure security standards
• ISO/IEC 27001 awareness
• POPIA awareness
• Operational risk management

Relevant Certifications (Advantageous)

One or more of the following certifications would be beneficial:

• IBM DataPower Gateway training or relevant IBM technical credentials
• IBM API Connect certifications or training
• IBM integration and middleware certifications
• Cisco Certified Network Associate (CCNA)
• CompTIA Network+
• CompTIA Security+
• Red Hat Certified System Administrator (RHCSA)
• Linux Professional Institute Certification (LPIC)
• Microsoft infrastructure certifications
• ITIL 4 Foundation
• Relevant SSL/TLS, PKI or cybersecurity certifications
• Other recognised enterprise middleware, networking or infrastructure qualifications

Key Personal Attributes

• Strong technical troubleshooting and problem‑solving abilities.
• Excellent understanding of secure enterprise connectivity.
• Strong attention to detail and configuration accuracy.
• Ability to investigate complex gateway and network incidents.
• Calm and methodical approach to production troubleshooting.
• Excellent technical documentation skills.
• Strong communication and stakeholder engagement abilities.
• Ability to collaborate with infrastructure, network and security teams.
• Proactive approach to monitoring and preventative maintenance.
• Strong operational discipline and change management awareness.
• Ability to manage critical incidents and competing priorities.
• Commitment to security, reliability and service availability.
• High levels of accountability, professionalism and integrity.