Senior ISAM Developer – IBM Security Access Manager, IAM, Java

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Astra-North Infoteck Inc. in Canada seeks an IAM engineer with strong ISAM experience to implement and support security solutions. You will work on WebSEAL, ACLs, and authentication patterns within distributed systems, applying MFA and SSO concepts.

You will collaborate across security, infrastructure, and application teams, keeping IAM fundamentals and industry compliance in focus as newer IBM Verify Access evolves, with opportunities to influence architecture decisions and security posture.

Qualifications

• Strong experience implementing and supporting IBM ISAM.
• Excellent communication across security, infrastructure, and applications.
• Solid Java development experience in IAM contexts.
• Strong understanding of SSO, MFA, token-based authentication, and identity lifecycle.

Responsibilities

• Implement and support IBM ISAM including WebSEAL configuration and POS.
• Develop and integrate authentication/authorization in distributed systems.
• Collaborate across security, infrastructure, and application teams to deliver IAM solutions.
• Stay current with IBM ISAM/ISVA evolutions and security standards.

Skills

Java development

IAM fundamentals

SSO

MFA

token-based authentication

Identity lifecycle basics

Security collaboration

Tools

WebSEAL

LDAP

API gateways

WAF

mTLS

Job description

Strong experience implementing and supporting IBM Security Access Manager (ISAM), including:

• WebSEAL configuration, junctions, ACLs, protected object space (POS)

Solid Java development experience, preferably with:

• Authentication and authorization patterns in distributed systems

Strong understanding of IAM fundamentals:

• SSO, MFA concepts, token-based auth, identity lifecycle basics

Strong communication skills and ability to work across security, infrastructure, and application teams.

Nice-to-Have

• Experience with IBM Security Verify Access (ISVA) (newer branding/evolution of ISAM)
• Experience with IBM Security Directory Server / LDAP tuning and troubleshooting
• Exposure to API gateways, WAF, reverse proxy patterns, and mTLS
• Banking/financial services domain experience and security/compliance familiarity (e.g., SOC2, PCI, PIPEDA)