Senior IAM Engineer – IBM Verify

This is a fully remote position, open to applicants in India.

📋 Description

• Design, deploy, and operationalize comprehensive enterprise identity and access management solutions across the entire Verify platform.

• Create and implement IBM Verify architecture within both SaaS and hybrid enterprise settings.

• Configure and set up IBM Verify Identity Access (v11), which includes reverse proxy, web and API gateways, and junction configurations.

• Deploy containerized Verify Identity Access on OpenShift or Kubernetes, utilizing Helm-based configuration.

• Establish multi-environment setups (DEV, QA, PROD) in accordance with platform best practices.

• Configure Verify SaaS tenants, manage application onboarding, and ensure connectivity to enterprise systems.

• Implement secure configurations that align with enterprise security standards.

• Set up SSO across SAML, OIDC, and OAuth 2.0 protocols.

• Implement MFA solutions, including passwordless, biometric, and one-time-passcode methods.

• Configure adaptive and risk-based access using the platform's risk engine.

• Develop identity orchestration and authentication workflows using the no-code flow designer.

• Integrate both consumer and workforce access use cases.

• Connect IBM Verify with Active Directory, HR systems, and cloud directories.

• Onboard target applications using connectors, API-based provisioning, and SCIM.

• Establish provisioning policies, access governance, and certification campaigns when Verify Identity Governance is applicable.

• Implement role-based access control and segregation-of-duties measures.

• Create custom adapters and API integrations as necessary.

• Design high availability and failover solutions for on-premises and containerized Verify Identity Access deployments.

• Plan load balancing and failover strategies for hybrid components.

• Develop and test disaster recovery procedures for self-managed components.

• Optimize performance, including connection pooling, session handling, and reconciliation throughput.

• Conduct capacity planning and address system bottlenecks.

• Automate builds and deployments through scripting (Shell, Python, Ansible).

• Develop scripts for environment provisioning and configuration.

• Support CI/CD integration for containerized Verify components.

• Maintain infrastructure-as-code wherever feasible.

• Create architecture diagrams and documentation for builds.

• Develop operational runbooks.

• Provide handover documentation to support teams.

⛳️ Requirements

• Over 5 years of hands-on IAM engineering experience, with substantial time spent on IBM Verify (SaaS and Verify Identity Access / ISAM).

• Demonstrated experience in designing and implementing Verify environments from start to finish.

• Strong proficiency in federation standards: SAML, OIDC, OAuth 2.0.

• Extensive experience with SSO, MFA, passwordless authentication, and adaptive access configuration.

• Experience in deploying and managing Verify Identity Access, including reverse proxy and junction configurations.

• Familiarity with container orchestration (OpenShift or Kubernetes) for self-managed components.

• Experience integrating with Active Directory and other enterprise systems.

• Solid understanding of identity governance principles (IGA, RBAC, certification campaigns, SoD).

• Proficient in Linux system administration and strong scripting skills (Shell, Python).

• Experience working within enterprise production environments.

🏝️ Benefits

• Health insurance

• Remote work options