Contractor: Senior IBM Security Verify Access (ISVA/ISAM) Engineer

LOCATION REQUIREMENT: This role is remote but candidates MUST be based in India, working India Standard Time (IST) hours. Applications from outside India will not be considered.

Employment type: Contract, full-time, paid hourly
Position Summary

We are seeking a seasoned IBM Security Verify Access / IBM Security Access Manager specialist with 10+ years of IAM experience. The candidate should be hands-on in deploying, migrating, upgrading, troubleshooting, and operating enterprise-scale ISVA/ISAM environments, including IBM Security Directory Server and modern federation standards such as SAML 2.0, OAuth 2.0, and OpenID Connect. The client's environment also includes IBM Verify (SaaS); familiarity here is a strong plus but not required.
Key Responsibilities

IBM Security Verify Access / ISAM Administration

- Design, install, configure, and administer ISVA/ISAM environments

- Perform setup, migration, upgrade, patching, and lifecycle management of ISAM/ISVA/ISVIA virtual appliances

- Configure and support WebSEAL, Policy Server, Runtime Components, Federation Services, Advanced Access Control, authorization policies, and reverse proxy components

- Design and operate clustered, highly available, disaster recovery-ready ISVA environments

- Manage snapshots, backups, restores, runbooks, rollback plans, and production cutover activities

- Troubleshoot complex authentication, authorization, SSO, federation, appliance, certificate, and access policy issues

Federation, SSO, and Protocol Expertise

- Design and implement enterprise SSO using SAML 2.0, OAuth 2.0, OIDC, JWT

- Configure IdP/SP integrations, federation partners, metadata, certificates, endpoints, bindings, signatures, encryption settings

- Develop and troubleshoot claims, assertions, scopes, token attributes, subject identifiers, relay state, ACS URLs, redirect URIs

- Analyze SAML assertions, OAuth/OIDC tokens, authorization code flows, refresh token behavior, PKCE, token validation issues

- Onboard SaaS and on-prem applications to enterprise SSO platforms; support large-scale federation migration programs

Mapping Rules and Custom Authentication Logic

- Develop, enhance, and troubleshoot ISVA mapping rules using JavaScript

- Implement attribute mapping, claims transformation, token customization, session handling, policy-driven access flows

- Integrate mapping rules with LDAP attributes, HTTP headers, REST APIs, external decision points

- Debug rule execution, exceptions, runtime behavior across SAML, OAuth, and OIDC integrations

IBM Security Directory Server / LDAP

- Install, configure, administer, troubleshoot IBM Security Directory Server

- Support schema management, indexing, replication, backup, restore, tuning, HA configuration

- Troubleshoot LDAP bind, search, replication, SSL/TLS, schema, performance issues

- Support directory migration and integration with IAM platforms

Required Qualifications

- 10+ years of IAM experience with strong hands-on ISVA/ISAM administration

- ISVA/ISAM: installation, configuration, migration, upgrade, WebSEAL, Policy Server, AAC, Federation, reverse proxy, appliance operations

- Strong expertise in SAML 2.0, OAuth 2.0, OIDC, JWT, metadata, certificates, token claims, trust configuration

- Hands-on JavaScript mapping rule development for SAML, OAuth, OIDC, attribute transformation, custom authentication logic

- IBM Security Directory Server, LDAP schema, replication, indexing, tuning, SSL/TLS

- Certificates, PKI, TLS, Linux/Unix, load balancers, DNS, networking basics, logging, monitoring, production incident handling

- Shell scripting, Python, JavaScript, REST APIs, log analysis, support automation

Preferred Qualifications

- IBM Verify (SaaS) experience — a strong plus given the client's environment, but not required

- IBM Security Identity Manager / IBM Security Verify Governance familiarity

- IBM Security Directory Integrator experience

- Azure AD / Microsoft Entra ID, AWS Cognito, or other cloud IdP integration experience

- Kubernetes or OpenShift experience

- Experience leading IAM migration, modernization, consolidation, or platform upgrade initiatives

- Experience creating architecture diagrams, technical design documents, SOPs, runbooks

Key Competencies

- Strong analytical and troubleshooting mindset for high-severity production issues

- Ability to lead technical discussions with application, infrastructure, network, security, and vendor teams

- Strong documentation skills for runbooks, architecture notes, implementation plans, rollback plans, knowledge transfer material

- Clear communication for status updates, issue summaries, root cause analysis, stakeholder reporting

- End-to-end troubleshooting across ISVA/ISAM, WebSEAL, AAC, federation, mapping rules, IBM Security Directory Server, LDAP, certificates, DNS, load balancers

- Ability to analyze request flows, authentication traces, policy decisions, junction behavior, HTTP headers, cookies, session issues

- Hands-on debugging of SAML/OAuth/OIDC issues: metadata mismatch, assertion validation, signature/encryption failures, redirect URI problems, clock skew, certificate trust failures

Originally posted on Himalayas