Application Security

Job Location: Mumbai
Experience: 2 - 7 Years

• Extensive experience of 2-5 years in Application Security testing
• Good at application threat modeling and Applications risk exposure
• Strong Web application security experience with thorough understanding of web application vulnerabilities
• Knowledge of database, application, and Web server design and implementation
• Familiarity with Security Standards and groups (OWASP, OSSTM, WASC, FISMA)
• Experience in dynamic and static application vulnerability scanners like HP WebIspenct, IBM AppScan, HP Fortify, etc.
• Experience in manual verification of false positives reported by automated tool
• Experience in client handling including interaction with developers for understanding the mitigations
• Certified with CEH or other security related certification

---

Network Security

Job Location: Pune
Experience: 8 - 15 Years

• Advanced troubleshooting on Sidewinder and Netscreen Firewalls
• Implementation work (e.g. firewall changes to remediate rules)
• administering network security devices such as firewalls (Netscreen, Palo Alto Sidewinder), proxies(Blue Coat) and load balancers (F5)
• Min 4 years of experience
• Investigative work (e.g. reviewing of the firewall rules)
  - Exposure to HLD and LLD
  - Firewall - Juniper, McAfee, Palo Alto
  - Proxy - Blue coat
  - Loadbalancer - F5 or CISCO.

---

Identity & Access Manager - Products - Siteminder \ Oracle Access Manager & Oracle Identity Manager \ Novell IDM / NetIQ & ForgeRock IAM

Siteminder

Job Location: Mumbai \ Bangalore & Noida
Experience: 3 - 10 Years

• Configuring SiteMinder policy server, framing Rules and Policies, Policy Server maintenance, SSO configurations, Web Agent & Application Agent installations, Troubleshooting SiteMinder integration specific problems.
• Knowledge of Support SLA's, incident management, problem management wrt Support/ITIL framework
• Ensure adherence to support SLA's.
• Experience in design, installation, configuration, deployment, and implementation of the federation components i.e. Microsoft Active Directory (LDAP) 2000/ 2003, webserver, webagent, policy server, application server, webagent and policy server option packs, to implement Single Sign On (SSO) between client's application and its third parties using Federation services.
• Experience in installing and creating certificates used for Federation.
• Sound knowledge related to SiteMinder for SAML Federation.
• Research and analysis of existing Security solutions, Identified gaps accordingly as per requirements provided High-end security infrastructures solutions and Single Sign on (SSO) solutions.
• Create, manage and administer Agents, Authentication Schemes, user directories, Agent configuration objects, Host Configuration objects, logs and cache management.
• Troubleshooting issues related to SSO, authentication and authorization for achieving SSO and LDAP issues.
• Document business and functional issues such as security roles and accesses required to contribute to the design of an Identity and access management solution using Microsoft products, including MS Excel, MS Word, MS PowerPoint, and MS Access.
• Participates in the development and maintenance of SiteMinder integration processes
• Good knowledge on below:
  - Webservers IIS – 5/6/7/7.5
  - Sunone/iplanet – 4.x/5.1/6.1
  - Open source / inbuilt Apache – 1.3/2.0/2.2.x
  - Reverse proxy settings to application server.
  - Application servers Weblogic - 8.x & above
  - Apache Tomcat – 3.X/4.x/5.x & above
  - Websphere – 4.0 & above
  - Operation systems Windows 2000 & above
  - Unix, Linux
  - Solaris 8x & above
  - Databases MS SQL server 2000 & above
  - Oracle 9g & above
  - Directory servers Sunone Directory server, MS Active directory

---

Oracle Access Manager & Oracle Identity Manager - Development Experience.

Job Location: Mumbai \ Pune & Noida
Experience: 3 - 10 Years

Job Description 1: 5+ Years of Experience in Oracle Access Manager
Key Skills: Oracle Access Manager, Oracle Identity Manager and Oracle Business Intelligence

• Excellent knowledge on Identity & Access Management Domain
• Implementing & understanding various deployment model (fail over / clustering) using OIAM Product Stack
• Hands on experience in installing & configuring Oracle Access Manager, Oracle Identity Manager and Oracle Business Intelligence
• Should be able to communicate clearly, fluently and in an assertive manner. Presents ideas effectively.
• Should have excellent written and spoken communication skills.
• Should have client facing experience.
• Flexible to travel to any location in India/ abroad on short term (3-6 months) or long term

---

Novell IDM / NetIQ Identity and Access manager

Key Skills: Novell IDM / NetIQ Identity and Access manager, Novell eDirectory , Java ,java scripts.
Job Location: Bangalore
Experience: 3 - 10 Years

Experience: 4 to 6 yrs of experience in IDM with minimum 3 yrs in Net IQ IDM
Role: Sr Developer

• Excellent knowledge on Identity & Access Management Domain
• Novell eDirectory Administration/Support 8.X
• Installing & configuring NetIQ IDM 4.x components
• Define user provisioning and de-provisioning to various target systems(SAP,AD etc)
• Driver development skills on NetIQ IDM Drivers Active Directory, SAP HR, SAP UM, Mainframes
• Converting business requirement into driver policies
• Handson in developing PRDs , User App customization, Java scripting
• Good knowledge on Resource provisioning and Role Based Access Control
• Good communication skills.

---

ForgeRock IAM Consultant

Job Location: Mumbai & Noida

• 3 - 5 years' experience in Sun Identity Manager and Access Manager development
• Good technical development experience in Java/J2EE (i.e. JSP, Servlets, and JDBC etc.)
• Good knowledge of LDAP and directories and integration of at least 2 LDAPs with Oracle Identity & Access Manager.
• Good knowledge of Oracle Database, SQL Queries, UNIX, Linux, Windows, etc.

Preferred Skills:
• Exposure to webservices using REST
• Awareness of various IAM security products, methodologies and processes
• Ability to troubleshoot Networking Issues.
• Experience in other IAM products.

Professional Skills Required:
• Must possess the technical/functional skills necessary to understand and manage consulting project engagements
• Knowledge of evaluation of various IAM products primarily Sun IAM products – a plus
• Should be able to collaborate with cross-functional teams to drive adherence to program objectives and security processes, and take responsibility for achieving team deliverables, hitting target milestones
• Should be able to make appropriate and timely technical/ people decisions.
• Should be able to communicate clearly, fluently and in an assertive manner. Presents ideas effectively.

---

Interested candidates need to send their update resume to spirani@techmahindra.com