IBM ISIM L3 Engineer

Job Title IAM ISIM L3 Engineer

Experience 7+ years in IAM with IBM Security Identity

Manager

Role Overview

The IAM ISIM L3 Engineer provides advanced support, maintenance, and enhancements for IBM

Security Identity Manager (ISIM) within the enterprise IAM ecosystem. This role handles

complex troubleshooting, implements custom workflows and integrations, ensures platform

stability, and aligns IAM operations with security, compliance, and audit requirements.

Key Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and

permanent fixes.

• Configure and customize ISIM components (workflows, provisioning policies, service types,

roles, entitlements) using Java/J2EE, JavaScript, XML.

• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP,

Active Directory, SAP, databases, Unix/Linux, cloud services).

• Operate and tune application servers (e.g., IBM WebSphere) and underlying

directories/databases (e.g., IBM Directory Server, DB2/Oracle).

• Plan and execute patches, version upgrades, and migrations; coordinate change

management and rollback strategies.

• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation,

access reviews, reporting).

• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders;

provide knowledge transfer and documentation.

• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support

internal and external audits.

• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to

proactively prevent incidents.

• Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM

platforms.

Required Qualifications

• Bachelors degree in Computer Science, Engineering, or equivalent experience.

• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity

Manager (ISIM).

• Hands-on expertise with ISIM configuration, workflow development, policy management,

and adapter development.

• Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.

• Experience with LDAP schemas, Active Directory, and identity repositories.

• Working knowledge of IBM WebSphere Application Server and relational databases

(DB2/Oracle/SQL Server).

• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation,

identity governance.

• Experience with ITIL processes (Incident, Problem, Change) and service management tools.

• Solid Linux/Unix fundamentals and shell scripting.

• Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

• IBM Security Directory Integrator (SDI) development and operations.

• Exposure to SailPoint, Okta, Azure AD, or other IAM/IAG platforms.

• Experience with identity governance, certification campaigns, and access reviews.

• Knowledge of cloud IAM (AWS/GCP/Azure) and modern auth standards (SAML, OAuth2,

OIDC).

• Automation with Python/Groovy/PowerShell and CI/CD practices.

• Experience in regulated environments (SOX, PCI DSS, HIPAA, ISO 27001).

Key Performance Indicators (KPIs)

• Mean Time to Resolve (MTTR) for L3 incidents and problems.

• Change success rate and rollback frequency for patches/upgrades.

• Compliance audit readiness and number of audit findings.

• Adapter and workflow deployment success rate; reconciliation accuracy.

• Platform uptime, performance metrics, and queue backlogs.

• Quality and completeness of documentation and runbooks.

Tools & Technologies

• IBM Security Identity Manager (ISIM), IBM Security Directory Server, IBM WebSphere

Application Server

• IBM Security Directory Integrator (SDI), Tivoli, LDAP, Active Directory

• DB2, Oracle, SQL Server

• Linux/Unix, Shell, Python/PowerShell

• ServiceNow/Jira (ITSM/ITIL)

• Monitoring/Logging: Splunk, Prometheus/GrafanaRole & responsibilities

Preferred candidate profile