Customer IAM Engineer

Orcapod Consulting Services; Chennai District; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Orcapod Consulting Services seeks a Customer IAM Engineer with hands-on experience in on-prem authentication and access management solutions. You will implement and support authentication, SSO, federation, onboarding, troubleshooting, upgrades, and production support.

Collaborate with application, security, and infrastructure teams to design and deploy IAM platforms, integrate with LDAP/AD, manage certificates, and perform incident response for authentication issues.

Qualifications

• 37 years of IT experience with at least 2 years in IAM or customer authentication.
• Hands-on with IVIA/ISVA or Ping Identity products.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, SSO and federation.
• Experience with LDAP, Active Directory, JWT and tokens.
• Familiar with TLS certificates, keystores, reverse proxies, and sessions.
• Proficient in Linux/Unix and basic scripting.

Responsibilities

• Implement and support authentication solutions using IVIA/ISVA or Ping Identity.
• Configure authentication policies, reverse proxies, and session management.
• Integrate apps using SAML, OAuth, OpenID Connect, and LDAP.
• Support federation with external identity providers and partners.
• Develop authentication workflows and identity attribute mappings.
• Integrate IAM with LDAP/AD, databases, APIs, and downstream apps.
• Troubleshoot SSO, tokens, certificates, sessions, and access issues.
• Assist with upgrades, patching, certificate renewals, and vulnerability remediation.
• Participate in onboarding, testing, deployment, and documentation.
• Provide production support and participate in incident/change management.

Skills

Extensive IT experience

IAM / customer authentication

SAML 2.0, OAuth 2.0, OpenID Connect

LDAP / Active Directory knowledge

TLS certificates / truststores

Linux/Unix basics

SSO and federation understandings

Tools

IBM Security Verify Access (IVIA/ISVA)

WebSEAL / Advanced Access Control

PingFederate

PingAccess

PingDirectory

Job description

Job Summary

We are looking for a Customer IAM Engineer with hands‑on experience in on‑premises authentication and access management solutions such as IBM Security Verify Access (IVIA/ISVA), Ping Identity, or similar IAM platforms. The role involves implementing and supporting authentication, SSO, federation, application onboarding, troubleshooting, upgrades, and production support.

Key Responsibilities

• Implement and support customer authentication solutions using IBM IVIA/ISVA, Ping Identity, or similar IAM products.
• Configure authentication and access policies, reverse proxies, web access management, and session management.
• Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect, and LDAP.
• Support federation integrations with external identity providers and business partners.
• Develop and modify authentication workflows, mapping rules, and identity attribute transformations.
• Integrate IAM platforms with LDAP, Active Directory, databases, APIs, and downstream applications.
• Troubleshoot SSO, authentication, token, certificate, session, and application‑access issues.
• Support platform upgrades, patching, certificate renewals, and vulnerability remediation.
• Participate in application onboarding, solution design, testing, deployment, and documentation.
• Provide production support and participate in incident, problem, and change management.
• Collaborate with application, infrastructure, security, network, and vendor teams.
• Maintain technical documentation, operational procedures, and knowledge‑base articles.

Required Skills

• 37 years of overall IT experience, with at least 2 years of hands‑on IAM or customer authentication experience.
• Experience with at least one of the following:
  • IBM Security Verify Access (IVIA/ISVA), including WebSEAL or Advanced Access Control.
  • PingFederate, PingAccess, PingDirectory, or related Ping Identity products.
  • Comparable on‑premises authentication or federation platforms.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, SSO, and federation.
• Knowledge of LDAP, Active Directory, JWT, access tokens, and ID tokens.
• Experience with TLS certificates, keystores, truststores, authentication sessions, cookies, and reverse proxies.
• Troubleshooting experience using logs, browser developer tools, SAML tracing, and API testing tools.
• Working knowledge of Linux/Unix and basic scripting.
• Familiarity with high availability, load balancing, and multi‑environment deployments.