Role Overview

Architect, deploy, and operationalize enterprise identity and access management solutions across the full Verify platform
Design and implement IBM Verify architecture across SaaS and hybrid enterprise environments
Stand up and configure IBM Verify Identity Access (v11), including reverse proxy, web and API gateways, and junction configuration
Deploy containerized Verify Identity Access on OpenShift or Kubernetes, including Helm-based configuration
Build multi-environment setups (DEV, QA, PROD) following platform best practices
Configure Verify SaaS tenants, application onboarding, and connectivity to enterprise systems
Implement secure configuration aligned with enterprise security standards
Configure SSO across SAML, OIDC, and OAuth 2.0
Implement MFA, including passwordless, biometric, and one-time-passcode methods
Configure adaptive and risk-based access using the platform risk engine
Build identity orchestration and authentication flows using the no-code flow designer
Integrate consumer and workforce access use cases
Integrate IBM Verify with Active Directory, HR systems, and cloud directories
Onboard target applications using connectors, API-based provisioning, and SCIM
Configure provisioning policies, access governance, and certification campaigns where Verify Identity Governance is in scope
Implement role-based access control and segregation-of-duties controls
Develop custom adapters and API integrations where required
Architect HA and failover for on-premises and containerized Verify Identity Access deployments
Design load balancing and failover strategies for hybrid components
Develop and test disaster recovery procedures for self-managed components
Tune performance, including connection pooling, session handling, and reconciliation throughput
Conduct capacity planning and resolve system bottlenecks
Automate builds and deployments using scripting (Shell, Python, Ansible)
Develop environment provisioning and configuration scripts
Support CI/CD integration for containerized Verify components
Maintain infrastructure-as-code where possible
Create architecture diagrams and build documentation
Develop operational runbooks
Provide handover documentation to support teams

Requirements

5+ years of hands-on IAM engineering experience, with significant time on IBM Verify (SaaS and Verify Identity Access / ISAM)
Proven experience designing and implementing Verify environments end-to-end
Strong experience with federation standards: SAML, OIDC, OAuth 2.0
Strong experience with SSO, MFA, passwordless, and adaptive access configuration
Experience deploying and operating Verify Identity Access, including reverse proxy and junction configuration
Experience with container orchestration (OpenShift or Kubernetes) for self-managed components
Experience integrating with Active Directory and enterprise systems
Strong understanding of identity governance concepts (IGA, RBAC, certification campaigns, SoD)
Linux system administration and strong scripting skills (Shell, Python)
Experience working in enterprise production environments

Tech Stack

Ansible
Cloud
Kubernetes
Linux
OpenShift
Python

Benefits

Health insurance
Remote work options

Airitos, LLC

Open Positions (1)

Engineering

Senior IAM Engineer – IBM Verify