Identity Access Management

Purpose of the role

Yum! Brands Cybersecurity Division is looking for a dynamic candidate to provide technical operational support for the IBM Security Identity Manager (ISIM) for our global business enterprise. We are a company that thrives on innovation, so to be successful youll have a great degree of curiosity, as well as deep knowledge of Identity and Access Management systems.

This role involves day-to-day operations, troubleshooting, performance monitoring, and proactive maintenance of the ISIM. The Engineer will collaborate with cross-functional teams to deliver seamless access and identity management services.

Role & responsibilities

• Managing incidents, escalating critical issues to relevant teams, and tracking resolution progress.
• Administer and support ISIM environments, ensuring high availability and optimal performance.
• Monitor and troubleshoot ISIM components, including identity provisioning,

  workflow management

  , and role-based access control (RBAC).
• Manage user lifecycle processes, including onboarding, offboarding, and role changes.
• Perform regular health checks and audits of ISIM environments.
• Implement patches, updates, and upgrades to the ISIM system as necessary.
• Support the integration of ISIM with other systems such as Active Directory, LDAP, and custom applications.
• Assist with the development and implementation of ISIM policies and procedures to ensure compliance with security standards and best practices.
• Create Custom reports using TDI/ISDI
• Support IBM Security Identity Manager implementation with custom java and Java script based TDI/ISDI jobs
• Sound understanding of components in the IBM IDM suite Websphere Application Server(WAS), IBM Security Directory Integrator(ISDI), IBM Security Directory Server (ISDS)

Preferred candidate profile

• IAM Subject Matter Expertise with at least 6 - 10 years of hands on operation, integration and implementation experience on security solution w/ business application and processes.
• Minimum of 5 years technical experience on

  ISIM, ISAM,ISDI and ISDS.

• A deep understanding of

  Identity and Access Management Architecture

  is required.
• Proven experience with IBM Security (or comparable IAM solutions) and Active Directory required.
• Knowledge of Web Services Architecture is required such as SOAP, REST, SCIM etc.
• Exposure on SSO and Federation is required.
• Understanding of security and Java J2EE specification, Struts, WSDL, Web 2.0/WSRP.
• ISIM Customization: Advance Workflow customization, Workflow Extensions, LCR customization, ID policy customization, advance provisioning, and custom UI, custom Adapter Development
• ISAM Concepts: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access
• A solid understanding of Information Security Architecture technologies and concepts required: Firewalls, intrusion detection, monitoring tools, encryption, certificate authority, reverse proxy, etc.
• Strong programming and scripting skills such as Java, JavaScript, PowerShell, Python etc.