Key skills
AnsibleCloudKubernetesLinuxOpenShiftPythonShellHelmIAMOAuthSAMLActive DirectorySSOLoad BalancingSaaSCI/CDRemote Work
About this role
Role Overview
- Architect, deploy, and operationalize enterprise identity and access management solutions across the full Verify platform
- Design and implement IBM Verify architecture across SaaS and hybrid enterprise environments
- Stand up and configure IBM Verify Identity Access (v11), including reverse proxy, web and API gateways, and junction configuration
- Deploy containerized Verify Identity Access on OpenShift or Kubernetes, including Helm-based configuration
- Build multi-environment setups (DEV, QA, PROD) following platform best practices
- Configure Verify SaaS tenants, application onboarding, and connectivity to enterprise systems
- Implement secure configuration aligned with enterprise security standards
- Configure SSO across SAML, OIDC, and OAuth 2.0
- Implement MFA, including passwordless, biometric, and one-time-passcode methods
- Configure adaptive and risk-based access using the platform risk engine
- Build identity orchestration and authentication flows using the no-code flow designer
- Integrate consumer and workforce access use cases
- Integrate IBM Verify with Active Directory, HR systems, and cloud directories
- Onboard target applications using connectors, API-based provisioning, and SCIM
- Configure provisioning policies, access governance, and certification campaigns where Verify Identity Governance is in scope
- Implement role-based access control and segregation-of-duties controls
- Develop custom adapters and API integrations where required
- Architect HA and failover for on-premises and containerized Verify Identity Access deployments
- Design load balancing and failover strategies for hybrid components
- Develop and test disaster recovery procedures for self-managed components
- Tune performance, including connection pooling, session handling, and reconciliation throughput
- Conduct capacity planning and resolve system bottlenecks
- Automate builds and deployments using scripting (Shell, Python, Ansible)
- Develop environment provisioning and configuration scripts
- Support CI/CD integration for containerized Verify components
- Maintain infrastructure-as-code where possible
- Create architecture diagrams and build documentation
- Develop operational runbooks
- Provide handover documentation to support teams
Requirements
- 5+ years of hands-on IAM engineering experience, with significant time on IBM Verify (SaaS and Verify Identity Access / ISAM)
- Proven experience designing and implementing Verify environments end-to-end
- Strong experience with federation standards: SAML, OIDC, OAuth 2.0
- Strong experience with SSO, MFA, passwordless, and adaptive access configuration
- Experience deploying and operating Verify Identity Access, including reverse proxy and junction configuration
- Experience with container orchestration (OpenShift or Kubernetes) for self-managed components
- Experience integrating with Active Directory and enterprise systems
- Strong understanding of identity governance concepts (IGA, RBAC, certification campaigns, SoD)
- Linux system administration and strong scripting skills (Shell, Python)
- Experience working in enterprise production environments
Tech Stack
- Ansible
- Cloud
- Kubernetes
- Linux
- OpenShift
- Python
Benefits
- Health insurance
- Remote work options