Airitos, LLC
Contractor: Senior IBM Security Verify Access (ISVA/ISAM) Engineer
Be an Early Applicant
Design, administer, migrate, upgrade, and troubleshoot enterprise IBM Security Verify Access and IBM Security Access Manager environments. Manage WebSEAL, federation, access policies, reverse proxies, high availability, disaster recovery, certificates, and IBM Security Directory Server. Implement SAML, OAuth, OIDC, and JWT integrations, develop JavaScript mapping rules, and resolve complex authentication and authorization issues. Support production incidents, automation, documentation, runbooks, and technical coordination across application, infrastructure, network, security, and vendor teams.
LOCATION REQUIREMENT: This role is remote but candidates MUST be based in India, working India Standard Time (IST) hours. Applications from outside India will not be considered.
Employment type: Contract, full-time, paid hourly
Position Summary
We are seeking a seasoned IBM Security Verify Access / IBM Security Access Manager specialist with 10+ years of IAM experience. The candidate should be hands-on in deploying, migrating, upgrading, troubleshooting, and operating enterprise-scale ISVA/ISAM environments, including IBM Security Directory Server and modern federation standards such as SAML 2.0, OAuth 2.0, and OpenID Connect. The client's environment also includes IBM Verify (SaaS); familiarity here is a strong plus but not required.
Key Responsibilities
IBM Security Verify Access / ISAM Administration
- Design, install, configure, and administer ISVA/ISAM environments
- Perform setup, migration, upgrade, patching, and lifecycle management of ISAM/ISVA/ISVIA virtual appliances
- Configure and support WebSEAL, Policy Server, Runtime Components, Federation Services, Advanced Access Control, authorization policies, and reverse proxy components
- Design and operate clustered, highly available, disaster recovery-ready ISVA environments
- Manage snapshots, backups, restores, runbooks, rollback plans, and production cutover activities
- Troubleshoot complex authentication, authorization, SSO, federation, appliance, certificate, and access policy issues
Federation, SSO, and Protocol Expertise
- Design and implement enterprise SSO using SAML 2.0, OAuth 2.0, OIDC, JWT
- Configure IdP/SP integrations, federation partners, metadata, certificates, endpoints, bindings, signatures, encryption settings
- Develop and troubleshoot claims, assertions, scopes, token attributes, subject identifiers, relay state, ACS URLs, redirect URIs
- Analyze SAML assertions, OAuth/OIDC tokens, authorization code flows, refresh token behavior, PKCE, token validation issues
- Onboard SaaS and on-prem applications to enterprise SSO platforms; support large-scale federation migration programs
Mapping Rules and Custom Authentication Logic
- Develop, enhance, and troubleshoot ISVA mapping rules using JavaScript
- Implement attribute mapping, claims transformation, token customization, session handling, policy-driven access flows
- Integrate mapping rules with LDAP attributes, HTTP headers, REST APIs, external decision points
- Debug rule execution, exceptions, runtime behavior across SAML, OAuth, and OIDC integrations
IBM Security Directory Server / LDAP
- Install, configure, administer, troubleshoot IBM Security Directory Server
- Support schema management, indexing, replication, backup, restore, tuning, HA configuration
- Troubleshoot LDAP bind, search, replication, SSL/TLS, schema, performance issues
- Support directory migration and integration with IAM platforms
Required Qualifications
- 10+ years of IAM experience with strong hands-on ISVA/ISAM administration
- ISVA/ISAM: installation, configuration, migration, upgrade, WebSEAL, Policy Server, AAC, Federation, reverse proxy, appliance operations
- Strong expertise in SAML 2.0, OAuth 2.0, OIDC, JWT, metadata, certificates, token claims, trust configuration
- Hands-on JavaScript mapping rule development for SAML, OAuth, OIDC, attribute transformation, custom authentication logic
- IBM Security Directory Server, LDAP schema, replication, indexing, tuning, SSL/TLS
- Certificates, PKI, TLS, Linux/Unix, load balancers, DNS, networking basics, logging, monitoring, production incident handling
- Shell scripting, Python, JavaScript, REST APIs, log analysis, support automation
Preferred Qualifications
- IBM Verify (SaaS) experience — a strong plus given the client's environment, but not required
- IBM Security Identity Manager / IBM Security Verify Governance familiarity
- IBM Security Directory Integrator experience
- Azure AD / Microsoft Entra ID, AWS Cognito, or other cloud IdP integration experience
- Kubernetes or OpenShift experience
- Experience leading IAM migration, modernization, consolidation, or platform upgrade initiatives
- Experience creating architecture diagrams, technical design documents, SOPs, runbooks
Key Competencies
- Strong analytical and troubleshooting mindset for high-severity production issues
- Ability to lead technical discussions with application, infrastructure, network, security, and vendor teams
- Strong documentation skills for runbooks, architecture notes, implementation plans, rollback plans, knowledge transfer material
- Clear communication for status updates, issue summaries, root cause analysis, stakeholder reporting
- End-to-end troubleshooting across ISVA/ISAM, WebSEAL, AAC, federation, mapping rules, IBM Security Directory Server, LDAP, certificates, DNS, load balancers
- Ability to analyze request flows, authentication traces, policy decisions, junction behavior, HTTP headers, cookies, session issues
- Hands-on debugging of SAML/OAuth/OIDC issues: metadata mismatch, assertion validation, signature/encryption failures, redirect URI problems, clock skew, certificate trust failures
Similar Jobs
.jpeg)
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Operate and maintain specialty, bulk, and chemical gas distribution systems supporting semiconductor manufacturing. Perform preventive, corrective, and breakdown maintenance; respond to alarms; troubleshoot equipment; support installations and commissioning; complete work orders, inspections, and documentation; follow EHS, permit-to-work, JSA, LOTO, PPE, and chemical safety procedures; conduct shift handovers; and support TPM, reliability, predictive maintenance, and continuous improvement using digital and generative AI tools.
Top Skills:
Bulk Gas SystemsChatgptChemical And Gas Distribution SystemsClaudeCmmsGas Monitoring And Alarm SystemsGen AiLarge Language Models (Llms)LotoMicrosoft CopilotMS OfficeSap PmSpecialty Gas SystemsTpm
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Support NAND and SSD product bring-up and high-volume manufacturing, perform electrical and physical failure analysis, use AI and data analysis to improve yield and resolve customer returns, develop test and validation plans, and drive cross-functional qualification and issue resolution.
Top Skills:
Artificial IntelligenceData AnalysisNandPcieSASSataSsd
.png)
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.
Top Skills:
Cloud TechnologyGenerative AiGoJavaService-Oriented Architecture
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
