IBM Identity and Access Manager

Job Description and Duties

State Fund has a position available for an IBM Identity and Access Manager at our Vacaville Information Technology location. The position is being offered as permanent. 

We are seeking an IBM Identity and Access Manager who will support changes and provide training, not limited to the following:

• Role management and user provisioning/de-provisioning.

• Tivoli Identity Manager Architecture design changes.

• New Process Flows.

• Installation and configuration parameters, environment details, and scripts. 

• Update new and existing procedures associated with changes.

• New and existing resources and tools needed to support the new processes and procedures.

• Primary support for Tivoli Access Manager and Tivoli Identity Manager.

• Support DR environment and procedures.

New to state candidates will be hired into the minimum salary of the classification or minimum of the alternate salary range when applicable. Placement to alternate salary range may be based on education or experience identified in your state application.

You will find additional information about the job in the .

Working Conditions

Special Requirements

Effective July 1, 2025, the State of California implemented the Personal Leave Program 2025 (PLP 2025) which reduces an employee’s monthly salary in exchange for leave credits. Employees appointed to this classification will have their monthly salary reduced and will accrue hours of PLP 2025 on the first day of each pay period in accordance with the applicable The salary range(s) included on this job posting do not reflect the reduction in pay.

To be considered, you must provide a fully completed STD 678 application, resume, and/or statement of qualifications if required. Alternative documents submitted in lieu of required Application, Resume, or Statement of Qualifications will not be accepted. Completed STD 678 must include duties performed, start and end dates, and hours worked per week for each position held.

Artificial intelligence (AI) tools such as ChatGPT, website searches, and third-party reviewers can be helpful in researching responses to the SOQ; however, by submitting your application for this position, you understand and acknowledge the SOQ you submit is your own work, in your own words, and accurately reflects your knowledge, skills, abilities, and experiences. Submitting an SOQ that is not your own may be cause for disqualification from the hiring process.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

The tasks for the IBM Identity and Access Manager include, but are not limited to, the following:

• Train team members on Server Alive Server monitoring tool. Training includes, but not limited to installation, configuration and testing. 

• Train team members on IBM Tivoli Identity Manager. Training includes, but not limited to Architecture, Admin GUI, flow and password reset process. 

• Train team members on IBM Tivoli Access Manager. Training includes, but not limited to reverse proxy concept, DNS, windows single sign on.

• Provide support to TAM and TIM system.

• Analyze system design problems and suggest alternative designs/solutions.

• Setup Delegated Administration within TIM system for Password Resets and Auditor Role.

• Install and configure Tivoli Security Role Modeling Assistant Tool.

• Train the ISAM team on the use of Role Modeling Assistant.

• Assist in migrating RBAC spreadsheet on Role Modeling Assistant.

• Create an automated process for creating IDs in TIM to propagate to UA.

• Install and configure basic user provisioning (creation and deletion) in AD, SSO and SSHR.

• Gather business requirements and/or bug fixes from the user community.

• Convert the user requirements into functional and technical specifications.

• Code programs as per the technical specifications and unit testing.

• Document programming work effectively with process flow diagrams.

• Provide Production Support as needed or required.

• Work independently, as a member of a team or as a lead of a team as required by State Fund.

• Perform approved maintenance to continue business viability of the mainframe applications.

Benefits

State Fund employees are eligible for a number of benefits. Our benefit package includes:

Health Benefits Program (CalPERS)

Retirement (CalPERS)

Employer Health and Consolidated Benefits Contributions

Dental, Vision

401(k) and 457 Deferred Compensation Plans

Employee Assistance Program

Group Legal Services Insurance

Holidays, Vacation/Sick/Other Paid Leave

Flex Elect Reimbursement Program

Wellness and Recognition

Alternate Work Schedules

Transit Pass Program

Tuition Reimbursement

Dependent Scholarship Program

Leadership Training

Mentoring Program

Background Investigation

Prior to employment with State Compensation Insurance Fund, a background investigation (BI) will be initiated.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.