Senior ISVA/ISAM Engineer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Airitos, LLC

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

🔐 Security

Consulting • Security

Airitos, LLC is a consulting firm specializing in identity and access management. The company focuses on optimizing the identity lifecycle for both internal and external users, offering services that include identity and access assessments, architecture and strategy, and implementation services. Airitos aims to enable businesses by providing comprehensive identity and access management solutions.

📋 Description

• Design, install, configure, administer, migrate, upgrade, patch, and manage the lifecycle of ISVA/ISAM/ISVIA virtual appliances • Configure and support WebSEAL, Policy Server, Runtime Components, Federation Services, Advanced Access Control, authorization policies, and reverse proxy components • Design and operate clustered, highly available, disaster recovery-ready ISVA environments • Manage snapshots, backups, restores, runbooks, rollback plans, and production cutover activities • Troubleshoot complex authentication, authorization, SSO, federation, appliance, certificate, and access policy issues • Design and implement enterprise SSO using SAML 2.0, OAuth 2.0, OIDC, and JWT • Configure IdP/SP integrations, federation partners, metadata, certificates, endpoints, bindings, signatures, and encryption settings • Develop and troubleshoot claims, assertions, scopes, token attributes, subject identifiers, relay state, ACS URLs, and redirect URIs • Analyze SAML assertions, OAuth/OIDC tokens, authorization code flows, refresh token behavior, PKCE, and token validation issues • Onboard SaaS and on-premises applications to enterprise SSO platforms and support federation migration programs • Develop, enhance, and troubleshoot ISVA mapping rules using JavaScript • Implement attribute mapping, claims transformation, token customization, session handling, and policy-driven access flows • Integrate mapping rules with LDAP attributes, HTTP headers, REST APIs, and external decision points • Install, configure, administer, and troubleshoot IBM Security Directory Server • Support schema management, indexing, replication, backup, restore, tuning, and HA configuration • Troubleshoot LDAP bind, search, replication, SSL/TLS, schema, and performance issues • Support directory migration and integration with IAM platforms • Lead technical discussions with application, infrastructure, network, security, and vendor teams • Create documentation including runbooks, architecture notes, implementation plans, rollback plans, and knowledge transfer material • Perform end-to-end troubleshooting across ISVA/ISAM, WebSEAL, AAC, federation, mapping rules, IBM Security Directory Server, LDAP, certificates, DNS, and load balancers • Analyze request flows, authentication traces, policy decisions, junction behavior, HTTP headers, cookies, and session issues • Debug SAML/OAuth/OIDC issues including metadata mismatch, assertion validation, signature/encryption failures, redirect URI problems, clock skew, and certificate trust failures

🎯 Requirements

• 10+ years of IAM experience with strong hands-on ISVA/ISAM administration • Hands-on experience with ISVA/ISAM installation, configuration, migration, upgrades, WebSEAL, Policy Server, AAC, Federation, reverse proxy, appliance operations • Strong expertise in SAML 2.0, OAuth 2.0, OpenID Connect, JWT, metadata, certificates, token claims, and trust configuration • Hands-on JavaScript mapping rule development for SAML, OAuth, OIDC, attribute transformation, and custom authentication logic • Experience with IBM Security Directory Server, LDAP schema, replication, indexing, tuning, SSL/TLS • Knowledge of certificates, PKI, TLS, Linux/Unix, load balancers, DNS, networking basics, logging, monitoring, and production incident handling • Experience with shell scripting, Python, JavaScript, REST APIs, log analysis, and support automation • Must be based in India and work India Standard Time (IST) hours • IBM Verify (SaaS) experience is preferred but not required • Familiarity with IBM Security Identity Manager / IBM Security Verify Governance, IBM Security Directory Integrator, Azure AD / Microsoft Entra ID, AWS Cognito, Kubernetes or OpenShift is preferred • Experience leading IAM migration, modernization, consolidation, or platform upgrade initiatives is preferred • Experience creating architecture diagrams, technical design documents, SOPs, runbooks, and knowledge transfer material is preferred

🏖️ Benefits

• Paid hourly • Remote work arrangement • Contract opportunity