Production Control Security Analyst

PRODUCTION CONTROL ANALYST

Major Responsibilities:

Provide support for day to day operations

Support access provisioning / de-provisioning and resolve all access issues on mainframe web security SAP and other platforms

Support COTS products as it relates to Production Control Security Analyst

Must have a good understanding of Windows Linux and Mainframe systems

3 Years of AD Management and automation with PowerShell

Provide support to developers to analyze and resolve production issues.

Provide 24/7 on call support for production processing.

Review and resolve tickets assigned.

Good documentation and communication skills

Provide cross training support for other team members

1-2 Years Perl Python DOS Bash scripting experience

1-2 Years Java and JavaScript development expertise as it relates to TDIIBM Security Directory Integrator) 3-5 Years Operational and Maintenance Activities

o IBM Security Verify Governance Identity Manager (ISVGIM)Version 10.0.1.x Operational Activities Administration Activities

o Assist and troubleshoot manual creation of users

o Manual reconciliation or adoption of any target users

o Management of provisioning and password issue

o Creation and management of roles and roles to entitlement mapping

o Management of role owner approver

o Creation and management of user recertification campaigns

o Automate manual process wherever possible.

o Work with technical and business stakeholders to troubleshoot.

Ongoing maintenance of the existing IBM environment includes.

o Monitoring the reconciliation of the target system

o Monitoring the user feed files

o Add modify update provisioning policies wherever necessary in the application.

o Create modify update SDI(TDI) assembly lines to maintain the data current.

o Troubleshooting any of the user provisioning and password related processes

o Troubleshooting any application component failures

o

o Troubleshooting role and access provisioning and revocation.

o Troubleshooting any application component failures

o Coordinating the application of fix packs to IBM Security Verify Governance Identity Manager and its components as required.

o Coordinating the production change and migration activities

o IBM (Tivoli)Security Directory Integrator development and code maintenance.

o

o IBM Security Verify Access and Federation Module Operational Activities

Administration Activities

o Create and maintain junctions groups ACLs Objectspace dynamic URLs configuration files

o Provide support for the application team to troubleshoot webproxy related issues. o Setup and troubleshoot SSO federation with SAML 2.0 WS-Federation and OpenID Connect protocols for federated access.

o Handle federation certificates udates with the clients.

o Setup and maintain Advanced Access Control (AAC) policies enabled Mobile Multi Factor Authentication (MMFA) data for all user types.

o

Ongoing maintenance of the existing environment

o Troubleshooting any of the single sign on and federation related incidents

o Troubleshooting any application component failures

o Coordinating the application of fix packs to IBM Security Verify Access and its components as required

o Coordinating the production change and migration activities

o Troubleshooting access related issues with application team whenever necessary.

o

Skills that are needed:

IBM Security Verify Access (v10.0.3 and above) administration for user and access provisioning. IBM Security Verify Governance Identity Manager (v10.0.1and above) administration for user and access provisioning.

IBM Security (Tivoli) Directory Integrator (ISDI) (TDI)

IBM Security Directory Server (SDS)

IBM Security Verify Access Federation Module

Web Sphere Application Server Network Deployment (WAS-ND)

IBM DB2 Database Server Version 11.5 and above (DB2) GSKit update certificate.

Mainframe RACF administration for user and access provisioning

Oracle EBS user provisioning

SAP ECC 6.0 User Security Administration

Knowledge of Certificate generation.

Key skills include user account management group policy management knowledge of Federation Services (ADFS) LDAP queries PowerShell scripting backup and recovery processes security management DNS management and troubleshooting user authentication issues.

Automation particularly through PowerShell scripting enhances efficiency in user management tasks and reduces the likelihood of human error which is highly desired in IT roles.

Skills that would be nice to have:

Must have a good understanding of DOS and Bash scripting.

Support PGP encryption and Secure file transfer using Serv-U

Microsoft power Apps Microsoft Power BI