Contractor: Senior IBM Security Verify Access (ISVA/ISAM) Engineer

Accountabilities:

• • Design, install, configure, administer, migrate, upgrade, patch, and maintain enterprise ISVA/ISAM environments and virtual appliances.
  • Configure and support WebSEAL, Policy Server, Runtime Components, Federation Services, Advanced Access Control, authorization policies, reverse proxies, and related IAM components.
  • Architect and operate clustered, highly available, and disaster-recovery-ready environments, including backups, snapshots, restores, rollback plans, runbooks, and production cutovers.
  • Troubleshoot complex authentication, authorization, SSO, federation, certificate, appliance, reverse-proxy, and access-policy issues in production environments.
  • Design and implement enterprise SSO integrations using SAML 2.0, OAuth 2.0, OIDC, and JWT, including IdP/SP configurations, metadata, certificates, endpoints, bindings, signatures, and encryption.
  • Analyze and resolve issues involving SAML assertions, OAuth/OIDC tokens, authorization codes, refresh tokens, PKCE, claims, scopes, redirect URIs, ACS URLs, and token validation.
  • Develop, enhance, and troubleshoot ISVA/ISAM mapping rules using JavaScript for attribute transformation, claims processing, token customization, session handling, and custom authentication logic.
  • Integrate mapping rules with LDAP attributes, HTTP headers, REST APIs, and external decision points while debugging runtime behavior across federation protocols.
  • Administer and troubleshoot IBM Security Directory Server, including schema management, indexing, replication, backup, restore, performance tuning, HA, and SSL/TLS configuration.
  • Support directory migrations and integrations with IAM platforms while resolving LDAP bind, search, replication, schema, and performance issues.
  • Manage certificates, PKI, TLS, Linux/Unix environments, load balancers, DNS, networking, logging, monitoring, and production incident response.
  • Use shell scripting, Python, JavaScript, REST APIs, and log-analysis techniques to automate support activities and improve operational efficiency.
  • Lead technical discussions with application, infrastructure, networking, security, and vendor teams and contribute to IAM migration, modernization, consolidation, and upgrade initiatives.
  • Produce and maintain architecture diagrams, technical design documents, SOPs, implementation plans, rollback procedures, runbooks, and knowledge-transfer materials.

  Requirements

  • 10+ years of experience in Identity and Access Management, with extensive hands-on experience administering IBM Security Verify Access (ISVA) and/or IBM Security Access Manager (ISAM).
  • Strong expertise with ISVA/ISAM installation, configuration, migration, upgrades, WebSEAL, Policy Server, Advanced Access Control, Federation Services, reverse proxies, and appliance operations.
  • Deep knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, JWT, federation metadata, certificates, trust configuration, token claims, and authentication flows.
  • Hands-on experience developing and modifying ISVA/ISAM mapping rules using JavaScript, including SAML, OAuth, OIDC, attribute transformation, and custom authentication logic.
  • Strong experience with IBM Security Directory Server, LDAP schema, replication, indexing, performance tuning, SSL/TLS, and directory administration.
  • Solid understanding of PKI, TLS, Linux/Unix, load balancing, DNS, networking fundamentals, logging, monitoring, and production incident management.
  • Experience with shell scripting, Python, JavaScript, REST APIs, log analysis, and support automation.
  • Strong ability to trace and troubleshoot end-to-end request flows, authentication traces, policy decisions, junction behavior, HTTP headers, cookies, sessions, and access-control issues.
  • Demonstrated ability to diagnose complex federation problems such as metadata mismatches, assertion validation errors, signature or encryption failures, redirect URI issues, clock skew, and certificate trust failures.
  • Excellent analytical and problem-solving skills, particularly when handling high-severity production incidents.
  • Strong written and verbal communication skills, with the ability to clearly document root causes, technical decisions, implementation plans, and stakeholder updates.
  • Ability to collaborate effectively with distributed technical teams and lead discussions across application, infrastructure, networking, security, and vendor functions.
  • Preferred: Experience with IBM Verify SaaS, IBM Security Identity Manager, IBM Security Verify Governance, IBM Security Directory Integrator, Azure AD/Microsoft Entra ID, AWS Cognito, Kubernetes, or OpenShift.
  • Preferred: Experience leading IAM migration, modernization, consolidation, or platform upgrade programs.

  Benefits

  • Fully remote working arrangement for candidates located in India.
  • Full-time contract engagement with hourly compensation.
  • Work aligned with India Standard Time (IST).
  • Opportunity to work on enterprise-scale IAM and security infrastructure.
  • Hands-on exposure to complex ISVA/ISAM, WebSEAL, federation, LDAP, and SSO environments.
  • Opportunity to contribute to IAM modernization, migration, and cloud identity initiatives.
  • Collaboration with application, infrastructure, networking, security, and vendor teams.
  • Opportunity to deepen expertise across SAML, OAuth 2.0, OIDC, JWT, PKI, LDAP, and enterprise identity architectures.
  • Technical ownership and exposure to mission-critical production environments.