Manager Access Control

SUMMARY

IT Application Security Analyst/Identity Management Consultant with 8+

years of Experience in IT. With 4+ years in Identity Management including

User Provisioning, Directory Service, Access Control & SSO using TAM

(Tivoli Access Manager) as a Certified Deployment Professional & TIM

(Tivoli Identity Manager). Experience in WebSphere Application Server as a

Certified Administrator and LDAP (Sun ONE DS & IBM TDS) Administration.

AREAS OF EXPERTISE

Implementation of Access Control & User Provisioning Infrastructure

. Installation, configuration, deployment & management of IBM TAM

(Tivoli Access Manager) 5.1/6.0/6.1, IBM Tivoli Identity Manager (TIM)

4.5/4.6/5.0 on Windows 2000/2003, AIX 5.2/5.3 & Red Hat Linux.

. Extensive experience of Installation & Configuration of TAM components

including WebSEAL Reverse Proxy Server, Policy Server, Authorization

server & Run Time Environments.

. Clear working knowledge Authentication & Authorization including

Kerberos, SSL & EAI; Configured Access Control by Designing &

Implementing ACLs, POPs & Authorization rules.

Installation, Configuration & Administration of Application Server/Web

Server Environment

. Expertise in Web/Application servers include installation,

configuration & maintenance of IBM WebSphere Application Server (WAS)

5.x / 6.0, IBM HTTP server (IHS), Apache Web server & Sun ONE Web

server on a diverse set of platforms including AIX5.2/5.3, Solaris

8/9, Linux & Windows.

. Experienced in Workload Management (Cloning & Clustering), Performance

Tuning of WAS, Deployment & Troubleshooting support for J2EE

Applications.

Configuration of LDAP and Web Resources integration with Access Control

Components

. Involved in the Administration, Maintenance & Support of LDAP

including Sun ONE Directory server & IBM Tivoli Directory Sever; Good

knowledge of Schema design & Replication strategies.

. Experienced in configuring JAAS (Java Authentication & Authorization

Service), JACC (Java Authorization Contract for Containers) & Web

Trust Association including TAI++ & TAI with WebSphere.

TECHNICAL SKILLS

SSO/Access Control IBM Tivoli Access Manager

5.1/6.0/6.1

TAM Tech & Tools WebSEAL RPSS, Policy Server, Policy

Proxy Server, Authorization Server, IBM GSKit, ACL,

POP, Authorization Rules, WPM, EAI, EAS, SSO, CARS

User Provisioning IBM Tivoli Identity Manager

4.5/4.6/5.0, Tivoli Directory Integrator

Application Server Websphere 4.0/5.0/5.1/6.0/6.1,

WebLogic 7.x

WebSphere Tech & Tools WebSphere Security (HTTP, HTTPS, SSL,

J2EE Security, Java 2 Security,

TAI, TAI++, JAAS, JACC),

WebSphere MQ, Tivoli Performance Viewer

Web Servers Apache 2.x, MS IIS, SunONE

WebServer 6.x, IBM HTTP Server 1.x/6.x

LDAP/Directory Servers SunOne Directory Server 4.x/ 5.x, IBM

Tivoli Directory Server 5.1/6.0

Languages Java, C/C++, HTML, JavaScript,

JACL, JYTHON, Shell Scripting, Perl

XML Technologies SAX, DOM, DTD, XSL

Operating Platforms Windows (NT 4.0/2000/2003), Linux

(Red hat Enterprise AS 2.1/

2.5/3.5/4, Red hat

6.0/6.2/8.0, SUSE 9.x), UNIX (AIX 5.x, Solaris 8/9)

CERTIFICATIONS

IBM Tivoli Access Manager for e-business 6.0 Certified Deployment

Professional

IBM WebSphere Application Server 5.0 Certified System Administration

Projects

Role: SIMS Systems Analyst

State Farm Insurance, Bloomington, Il Aug'07-Till

Date

Environment: IBM Tivoli Access Manager for e-Business 5.1/6.0/6.1, WebSEAL

Reverse Proxy, IBM Tivoli Identity Manager 4.5/4.6/5.0, Sun ONE Directory

Server 5.2, IBM Tivoli Directory Server 6.0, IBM WebSphere Application

Server 5.0/5.1/6.0/6.1, IBM Tivoli Directory Integrator 6.0/6.1, Sun Java

Systems Web Server, IBM HTTP Server, IBM AIX 5.2/5.3, LTPA, SSL, TAI,

Kerberos.

Responsibilities:

. Incident\Problem Management for Identity Management infrastructure

including IBM Tivoli Access Manager 5.1/6.0 for e-business, IBM Tivoli

Identity Manager 4.5/4.6, IBM Tivoli Directory Server 6.0, IBM AIX

5.3, Sun ONE Directory Server 5.2 on HP UX 11.23 in an Internet &

Intranet Environment.

. Translated ACL (Access Control Lists) in NetApp NetCache Proxy Server

for Security to TAM Security Policies including Authorization Rules

and ACL to secure HTTP traffic in Intranet Environment.

. Translated Policies & Response to the Backend servers in CA eTrust

Site Minder to Authorization Rules & Junction handling in TAM to

secure & provide SSO to traffic in the Internet Environment.

. Shell scripted Installation, Patching, Configuration, Unconfiguration

& Uninstallation of Tivoli Access Manager Components including Policy

Server, Authorization Server and WebSEAL Reverse Proxy.

. Installation, Configuration & Complete setup of the User Provisioning

environment including Tivoli Identity Manager, End-Point Agents, TIM

Services, Tivoli Directory Integrator & WebSphere Application Server.

. Complete Identity Management Review & Customization using TIM 4.6/5.0

including Provisioning, Identity, Password Policies, Reconciliation,

Service Definitions, Entitlement & Operational Workflows.

. Technical support & assistance during the migration from Tivoli Access

Manager (TAM) 5.1 to TAM 6.0, Tivoli Identity Manager (TIM) 4.6 to TIM

5.0 &Sun ONE Directory Server 5.2 to Tivoli Directory Server 6.0.

. Administration of Data Integration between different systems including

LDAP & MS Active Directory. Installation and Configuration of AD Agent

& AD Service to provide Synchronization with TIM.

. Setup of POC environments for the validation of Migration of Standard

LDAP Model to LDAP Minimal Model, Dynamic URL to enable a Portal

Backend, Installation & Configuration of TAM/WebSEAL 6.1.

. Provided detail analysis for new applications deployed and enable

existing legacy applications by providing solutions including

Standard, Transparent, Virtual Host & Local Junctions and Security

Policies.

. Provided support for the Business Partners by troubleshooting the

issues, engaging the Vendor, gathering required traces and analyzing

traces for Root cause analysis.

. Administration of IBM Tivoli Directory server & Sun ONE Directory

server LDAP instances; Creation of LDIF files, replication strategy

review, design Directory data, Schema, Tree & Topology.

. Conducted periodic statistical analysis of the WebSEAL environment for

gathering trends and monitoring the health of the system. Designed &

developed a comprehensive Monitoring solution for the Web Access

Management infrastructure. Created detailed action & knowledge items

for the off-hour support.

. Involved in Test Planning, Developed Test cases, Provided

Troubleshooting Support and Impact Assessment from Unit Test,

Regression Test, System Test, Performance Test & Comparison Tests.

Role: TAM/WebSEAL Specialist

Knights of Columbus, New Haven, CT March'07-July'07

Environment: IBM Tivoli Access Manager 5.1/6.0, IBM Tivoli Directory Server

5.2/6.0, IBM WebSphere Application Server 5.0/5.1/6.0/6.1, MS IIS, Windows

2000/2003.

Responsibilities:

. Production Support of Tivoli Access Manager infrastructure including

IBM Tivoli Access Manager 5.1 for e-business for IBM WebSphere

Application Server 5.0 (WAS) in Windows 2000 Environment.

. Design, Implementation & Migration to a New Access Control Environment

with Tivoli Directory Server 6.0, Tivoli Access Manager 6.0 and its

components including Policy Server, WebSEAL, Authorization Server for

IBM WebSphere Application Server 5.1 & 6.1 in Windows 2003

Environment.

. Involved in deploying J2EE Applications in WebSphere in various secure

environments; Review of RBAC (Role Based Access Control) & update ACL

DB using PDWAS migration tool.

. Configuring Web Trust Association in WAS 5.0 using Trust Association

Interceptor (TAI) and in WAS 5.1 & 6.1 using Trust Association

Interceptor Plus (TAI ++) & Header based Authentication.

. Suggested and Implemented/Modified Backup Strategies, Monitoring and

Hardening various Systems. Provided documentation support and

conducted Knowledge transfer sessions related to TAM.

. Implemented a POC environment to eliminate a Java Based external

authorization component and moved the Access Control procedure to

Tivoli Access Manager. Simplified security in the environment by

migrating from Java Filters to ACLs & Authorization rules.

Role: Application Security Analyst

Symantec, Sunnyvale, CA

Jan'06 - Feb'07

Environment: IBM Tivoli Access Manager 5.1, IBM Tivoli Identity Manager

4.5, WebSEAL, Policy Server, WebSphere Application Server 6.0, IHS, IBM

Tivoli Directory Server, Windows 2000 server, IBM AIX.

Responsibilities:

. Maintenance & Support of Access Control infrastructure including IBM

Tivoli Access Manager 5.1 (TAM) for e-business for IBM WebSphere

Application Server 6.0 (WAS) in IBM AIX environment.

. Maintenance & Support of User Provisioning infrastructure including

IBM Tivoli Identity Manager 4.5 (TIM) for various repositories

including MS Active Directory, LDAP, RACF, . . . etc.

. Installation & Configuration of various instances of IBM TAM and its

components including Web Portal Manager (WPM), Policy Server, WebSEAL

Reverse Proxy Server & WebSEAL junctions

. Installation & Configuration of multiple instances of IBM Tivoli

Identity Manager, IBM Tivoli Directory Integrator, TIM Adapters,

Provisioning & De-provisioning Policies.

. Responsibilities included review and rewrite Authorization rules, ACLs

& POPs; Involved in the use of Web Portal Manager (GUI) & pdadmin

(Command Line Interface) for Security Policy review.

. Involved in the creation of Service Definitions and imported endpoint

profiles into TIM, created Workflows & configured remote services.

. Conducted/Attended Knowledge Transfer sessions related to WebSphere

Application Server 6.0, Password Policy Management, Single Sign-On

(SSO), Authentication & Authorization. Provided documentation support

for various SDLC stages.

Consultant

Delivered Software consulting services for Fortune 500 Companies &

Organizations.

Infrastructure Support, Financial Services Provider, Chicago, Il

Sep'04 - Dec' 05

Environment: IBM Tivoli Access Manager 5.1, IBM WebSphere Application

Server 5.0/5.1, IBM HTTP Server, JavaScript, IBM Tivoli Directory Server

5.2, Windows 2000, Red Hat LINUX.

Responsibilities:

. Installation, Configuration & Administration of IBM Tivoli Access

Manager 5.1 and its components including WebSEAL for IBM WebSphere

Application Server 5.0/5.1, Apache Web Server & Tomcat Application

Server environment involving Development, Testing, QA, Staging,

Production stages.

. Installation & Configuration of the Directory Service Infrastructure

consisting of IBM Tivoli Directory Server 5.2. Routine administration

of LDAP Replication, Performance Tuning & Troubleshooting.

. Planned, Scheduled and Implemented Backups & Changes in all

Environments. Created process related documentation for handling TAM,

TDS & WebSphere related issues & requests.

. As a Requirement Analyst represented the team for projects;

Responsible for coordinating with Functional Requirement & System

Requirement phases of the project.

. Responsible for converting Functional requirement documents from

Business Analyst's to Technical requirements on the Project design

phase.

Application Server Infrastructure Support, Financial Services Provider, Los

Angeles, CA Feb 04- Sep 04

Environment: IBM WebSphere Application Server 5.0, IBM HTTP Server,

WebSphere MQ, XML, Windows 2000

Responsibilities:

. Installation, configuration & administration of WebSphere Application

Server 5.1, IBM HTTP Server 1.3.2, Apache Web server 1.1 & iPlanet Web

server; configuration of web server plug-in.

. Up-gradation of WebSphere Application Server 5.0 to 5.1; fixed

installation problems.

. Configured clustering using Network Deployment Manager (NDM) &

Application Deployment Support.

WebSphere Administrator, Financial Services Provider, Dayton, Ohio

Mar'03 - Feb'04

Environment: JAVA, J2EE, IBM WebSphere 5.0, HTML, JavaScript, Windows 2000

Responsibilities:

. Designed & Deployed WebSphere Application Server instances

prioritizing Load Balancing & Failover.

. Administration of the Middleware Environment by Checkouts, Regression

Tests & Troubleshooting.

. Constant interaction with Developers in building & deploying

Applications between servers in a cluster.

Software Developer/Programmer, Software Solution Provider, Chennai, India

Apr'99 - Aug'00

Environment: C, C++, JAVA (JDK1.1, OOP, UML, Applet), HTML, JavaScript,

Windows NT 4.0

Responsibilities:

. Part of a team to design & develop a Java based Front End for the

Application & involved in the migration from the C to Java; Developed

UML as part of migration from Structured Coding to OOP.

. Developed Applets & HTML as display mechanism to show the

corresponding results generated.

Contact this candidate