Job Description

Introduction
Information and Data are some of the most important organizational assets in today\xe2\x80\x99s businesses. As a Security Consultant, you will be a key advisor for IBM\xe2\x80\x99s clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client\'s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities

• Experience in MySQL and Unix Shell/Perl scripting
• Knowledge of Web Services (REST/SOAP), Directories (LDAP, AD), etc.
• Knowledge of Application server like Tomcat, Weblogic and WebSphere.
• Demonstrate knowledge of market trends, new technology and security/Identity and Access Management services.
• Build and nurture positive working relationships with clients with the intention to exceed client expectations.
• Understand clients\' business environment and basic risk management approaches
• Designing and developing Identity Management, Role Based Access Control solutions, Workflows, Certification. UI Customization, Rules and Policies.
• Provide technical expertise for Account Aggregation and Group Aggregation to aggregate data from different application types.
• Implementing multiple Rules - Connector rules, Aggregation rules & Provisioning rules
• Configuration of Roles, Policy and Certifications for governance compliance, Certification
• Rules, Policy Violation Rules, SODs
• Configurations for Access Request and Emergency access use cases as per customer requirements
• Design and deliver high quality security architecture and infrastructure setups and/or sub-systems to agreed deadlines.
• Assist customers in developing a secured Identity management infrastructure and also to define security policies to protect their applications from unauthorized access.
• Lead and own the security solution implementation.
• Actively participate in decision making with solution architect and seek to understand the broader impact of current decisions.
• Facilitate use of technology-based tools or methodologies to review, design and/or implement products and services.
• Contribute towards training and mentoring the team.
• Participate in proposal development efforts
• Develop custom connectors using APIs exposed by the products.
• HLD and LLD experience
• Ability to work with the internal Project team and end customer to continue design and deployment activities and further enhance the IAM solution
• Documentation skills

Required Technical and Professional Expertise

• 2-10 years of industry experience with minimum 2 years relevant experience in Saviynt and/or SailPoint-IIQ and/or Okta and/or CyberArk and/or Azure AD , windows AD.
• Experience in development and implementation, design and architecture of the identity and access management solutions.
• Must possess the technical/functional skills necessary to understand and manage consulting project engagements.
• Experience in developing identity/access management strategies, architectures, and implementation plans.
• Experience in end-to-end implementation lifecycles of Identity/Access Management project.
• Excellent hands-on knowledge on the best practices of deploying the security solution.
• Leading facilitated workshop sessions.
• Experience with Enterprise Provisioning, Roles - based Access Controls, Single - Sign - On, external and internal federation, and systems integration, Compliance based Attestation and Re \xe2\x80\x93 certification.
• Experience with managing Okta Mastered Users, Application with Single Sign - On (SSO) and application provisioning.
• Robust knowledge of Web Access management processes, technologies, with emphasis on federation expertise, web services , and SOA Thorough understanding of SAML specification , digital signatures , certificates management , and session management.
• Strong experience with common web access management domain related skills (e.g. understanding the concepts of cookies , sessions , header / cookie variables , HTTP traffic flow / analysis , etc.)
• Strong expertise on design and architecting highly available solutions for Identity and Access Management.
• Knowledge of network & internet security, business impact assessment and risk management
• Design & implementation of Identity/Access Management solutions on multiple flavors of operating systems.
• Develop the migration strategy, migration plans and risks for migration from previous versions of Identity/Access management systems to current versions.
• Must possess the technical/functional skills necessary to understand and manage consulting project engagements.
• Experience in development and implementation, design and architecture of privileged access solution using PAM skills like CyberArk / Secret Server
• Must possess the technical/functional skills necessary to understand and manage consulting project engagements.
• Should have a good understanding of Identity and Access Management platform framework and functions.
• Should have good basic skills and conception understanding of Windows Architecture and on Networking basics
• Should have very good knowledge on User Access Management Process, Auditing and Reporting
• Should have good understanding of Microsoft Azure Active Directory and its Features & Functionalities like AAD SSO, AAD MFA, AAD B2B, AAD B2C, PIM, RBAC, Conditional Access, SSPR, AIP, Azure AD Application Proxy, Cloud App Security, Azure RMS
• Lead the technical troubleshooting bridges on high severity issues on Identity platform, driving to resolution.

Preferred Technical and Professional Expertise

• Knowledge of Cloud architectures and complex enterprise On-Premises IT landscapes and hybrid Cloud/On-Prem architectures
• Knowledge of enterprise identity lifecycle management processes and standards
• Proven track record in working as part of a team, meeting deadlines, tutoring/mentoring
• Experience in specific industry verticals is preferred
• Experience with the following web technologies: XML, SPML/SOAP, Web and Application Servers, HTML.
• Experienced working with logging frameworks like log4j.
• Experience with JavaScript and one of the major JavaScript MVC frameworks (preferably Angular)
• SaaS deployment experience
• Experience with at least one of the following development environments/languages: J2EE, Java, JavaScript

About Business Unit IBM Services is a team of business, strategy and technology consultants that design, build, and run foundational systems and services that is the backbone of the world\'s economy. IBM Services partners with the world\'s leading companies in over 170 countries to build smarter businesses by reimagining and reinventing through technology, with its outcome-focused methodologies, industry-leading portfolio and world class research and operations expertise leading to results-driven innovation and enduring excellence.

This job requires you to be fully COVID-19 vaccinated prior to your start date and proof of vaccination status will be required before your start date. During the Onboarding process you will be asked to confirm your vaccination status, in case you are unable to get vaccinated for any reason, you can let us know at that stage. Please let us know if you are unable to be vaccinated due to medical or religious reasons. IBM will consider such requests on a case by case basis subject to submission of required proof by the candidate before a stipulated date.


Your Life @ IBM Are you craving to learn more? Prepared to solve some of the world\'s most unique challenges? And ready to shape the future for millions of people? If so, then it\'s time to join us, express your individuality, unleash your curiosity and discover new possibilities.

Every IBMer, and potential ones like yourself, has a voice, carves their own path, and uses their expertise to help co-create and add to our story. Together, we have the power to make meaningful change \xe2\x80\x93 to alter the fabric of our clients, of society and IBM itself, to create a truly positive impact and make the world work better for everyone.

It\'s time to define your career.


About IBM IBM\xe2\x80\x99s greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we\xe2\x80\x99re also one of the biggest technology and consulting employers, with many of the Fortune 50 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it\xe2\x80\x99s time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.


Location Statement When applying to jobs of your interest, we recommend that you do so for those that match your experience and expertise. Our recruiters advise that you apply to not more than 3 roles in a year for the best candidate experience.

For additional information about location requirements, please discuss with the recruiter following submission of your application.


Being You @ IBM IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.