Customer IAM Engineer

Job Summary

We are looking for a Customer IAM Engineer with hands-on experience in on-premises authentication and access management solutions such as IBM Security Verify Access (IVIA/ISVA), Ping Identity, or similar IAM platforms. The role involves implementing and supporting authentication, SSO, federation, application onboarding, troubleshooting, upgrades, and production support.

Key Responsibilities

• Implement and support customer authentication solutions using IBM IVIA/ISVA, Ping Identity, or similar IAM products.
• Configure authentication and access policies, reverse proxies, web access management, and session management.
• Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect, and LDAP.
• Support federation integrations with external identity providers and business partners.
• Develop and modify authentication workflows, mapping rules, and identity attribute transformations.
• Integrate IAM platforms with LDAP, Active Directory, databases, APIs, and downstream applications.
• Troubleshoot SSO, authentication, token, certificate, session, and application-access issues.
• Support platform upgrades, patching, certificate renewals, and vulnerability remediation.
• Participate in application onboarding, solution design, testing, deployment, and documentation.
• Provide production support and participate in incident, problem, and change management.
• Collaborate with application, infrastructure, security, network, and vendor teams.
• Maintain technical documentation, operational procedures, and knowledge-base articles.

Required Skills

• 37 years of overall IT experience, with at least 2 years of hands-on IAM or customer authentication experience.

• Experience with at least one of the following:

• IBM Security Verify Access (IVIA/ISVA), including WebSEAL or Advanced Access Control.

• PingFederate, PingAccess, PingDirectory, or related Ping Identity products.

• Comparable on-premises authentication or federation platforms.

• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, SSO, and federation.

• Knowledge of LDAP, Active Directory, JWT, access tokens, and ID tokens.

• Experience with TLS certificates, keystores, truststores, authentication sessions, cookies, and reverse proxies.

• Troubleshooting experience using logs, browser developer tools, SAML tracing, and API testing tools.

• Working knowledge of Linux/Unix and basic scripting.

• Familiarity with high availability, load balancing, and multi-environment deployments.