Tivoli Security Consultant

Tivoli Access Manager Architect for IBM Germany at Deutsche Telekom - Aachen, Germany
07/2008 - 10/2009, 4 contracts
Developed and implemented a Tivoli Access Manager (TAM) SSO (Single Sign-On) Solution for appr. 100 backend applications (Apache Web Servers, Jetty, Tomcat and WebSphere Application Servers, SAP Portal). Developed, customized, tested and implemented cascaded authentication mechanisms for multiple, redundant TAM WebSeal servers (Reverse Proxies). Kerberos/SPNEGO authentication for multiple, trusted AD forests; SSL certificates authentication from customer-specific smartcard which required the implementation of an additional custom authentication module (CDAS module); Userid/Password authentication; Implementation of custom authentication module (CDAS module) for providing additional LDAP entry (=last_login_time) for each authentication mechanism. Developed, tested and implemented TAM authorization rules. User Provisioning via TAM Combo Adapter from Tivoli Identity Manager. Knowledge transfer and training of permanent staff. Implemented monitoring procedures and maintenance processes for the overall TAM infrastructure.
Related Software: Tivoli Access Manager 6.x, Tivoli Directory Server 6.x, Tivoli Directory Integrator, Tivoli Identity Manager, IBM DB/2 Universal Database 8.x and 9.x, WebSphere App. Srv., IBM HTTP Server, AIX and SUN Solaris

Tivoli Access Manager Consultant/Architect for MAN Automotive Producer, HQ Munich, Germany
11/2007- 05/2008, 2 contracts
Designed, implemented and upgraded Tivoli Access Manager (TAM) in conjunction with Tivoli Directory and WebSphere systems in high available multi-clustered environment. Designed, tested and implemented step-up authentication (via SSL certificates and Userid/Password) for TAM WebSeal servers provided for highly secured Internet access for Suppliers. Implementation of Intranet Single Sign-On (SSO) with TAM WebSeal for SAP Portal, WebSphere, Microsoft Sharepoint and Windows (Kerberos). Customization und configuration of TAM WebSphere Plugin Servers and TAM JACC Provider for WebSphere clusters. Knowledge transfer and training of permanent staff.
Related Software: Tivoli Access Manager 6.0 and 5.1, Tivoli Directory Server 6.x and 5.2, WebSphere Deployment Manager and App. Server 6.1/5.1, IBM HTTP Server, Tivoli Directory Integrator, SuSE Linux

Security Consultant/Architect for National Australia Bank, Headquarters Melbourne, Australia
11/2005-04/2007, 3 contracts
Planned, designed and deployed Tivoli Access Manager (TAM) in conjunction with WebSphere product family on high available corporate Internet banking implementation (http://www.nab.com.au). TAM WebSeal providing single sign-on (SSO) and access control for J2EE solution based on IBM WebSphere Portal and clustered WebSphere Application Servers. Development and Implementation of own Public Key Infrastructure (PKI). Designed and implemented SSL certificate process for TAM, LDAP and WebSphere components with own Certificate Authority (CA). Test and Implementation of highly-secured RSA Token Authentication for TAM WebSeal server in combination with Thales SafeSign Authentication Server and Hardware Crypto Modules. Implementation of TAM External Authentication Interface (EAI). Developed automated deployment of WebSphere Application / Portal / MQSeries servers and clusters. Defined support and maintenance processes for the overall TAM infrastructure.
Related Software: WebSphere Network Deployment Manager and WebSphere App. Server 5.1, WebSphere Portal Server V.5.1, WebSphere MQSeries, Tivoli Access Manager 5.1, CA eTrust Directory Server V.8, WebSphere Edge Server, IBM HTTP Server, Red Hat Linux, VmWare Virtual Center, SafeSign

Infrastructure Security Consultant for National Australia Bank Group Belfast, United Kingdom
04/2005 - 10/2005, 2 contracts
Implemented and migrated Tivoli Directory Server from V4.1 to 5.2 on Internet banking project (http://www.cbonline.co.uk and http://www.ybonline.co.uk). Implemented, configured and maintained Tivoli Access and Identity Manager environment. Put together design and implementation documentations. Co-operated with Tivoli Support in the UK/US. Knowledge transfer to permanent staff. Customer was appointed by IBM as their reference site for identity management solutions: http://www-306.ibm.com/software/success
Related Software: Tivoli Directory Server, Tivoli Access Manager 5.1, IBM Tivoli Identity Manager 4.5.1, Tivoli Directory Integrator, IBM WebSphere 5.1, Edge Network Disp., Solaris

IT & Entwicklung
- IT-Beratung
- IT-Architektur