IAM ISIM L3 Engineer

Orbus International; Chennai District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Orbus International is seeking an experienced IAM ISIM L3 Engineer to join our enterprise IAM program in Chennai. You will own advanced ISIM troubleshooting, configurations, integrations, and security controls in a complex environment.

The role requires 7+ years in IAM with ISIM experience, strong Java/J2EE, LDAP/AD, and webSphere skills. You will work with security, audit, and operations teams to ensure compliance and steady platform operations.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
• Hands-on ISIM configuration, workflow development, policy management, and adapter development.
• Strong proficiency in Java/J2EE, JavaScript and XML; familiarity with REST/SOAP APIs.
• Experience with LDAP schemas, Active Directory, and identity repositories.
• Working knowledge of IBM WebSphere AS and relational databases (DB2/Oracle/SQL Server).
• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.

Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
• Operate and tune application servers (IBM WebSphere) and underlying directories/databases (DB2/Oracle).
• Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.

Skills

IAM

ISIM configuration

Adapter development

Java/J2EE

JavaScript

XML

LDAP/AD

IBM WebSphere

Linux/Unix

Communication skills

Education

Bachelor’s degree in Computer Science/Engineering or equivalent

Tools

ISIM (IBM Security Identity Manager)

IBM WebSphere

LDAP/AD

DB2/Oracle/SQL Server

Unix/Linux

Python/PowerShell

ServiceNow/Jira ITSM

Job description

Job Description: IAM ISIM L3 Engineer

Job Title IAM ISIM L3 Engineer

Experience 7+ years in IAM with IBM Security Identity Manager

Role Overview

The IAM ISIM L3 Engineer provides advanced support, maintenance, and enhancements for IBM Security Identity Manager (ISIM) within the enterprise IAM ecosystem. This role handles complex troubleshooting, implements custom workflows and integrations, ensures platform stability, and aligns IAM operations with security, compliance, and audit requirements.

Key Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
• Operate and tune application servers (e.g., IBM WebSphere) and underlying directories/databases (e.g., IBM Directory Server, DB2/Oracle).
• Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.
• Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM platforms.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
• Hands-on expertise with ISIM configuration, workflow development, policy management, and adapter development.
• Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.
• Experience with LDAP schemas, Active Directory, and identity repositories.
• Working knowledge of IBM WebSphere Application Server and relational databases (DB2/Oracle/SQL Server).
• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.
• Experience with ITIL processes (Incident, Problem, Change) and service management tools.
• Solid Linux/Unix fundamentals and shell scripting.
• Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

• IBM Security Directory Integrator (SDI) development and operations.
• Exposure to SailPoint, Okta, Azure AD, or other IAM/IAG platforms.
• Experience with identity governance, certification campaigns, and access reviews.
• Knowledge of cloud IAM (AWS/GCP/Azure) and modern auth standards (SAML, OAuth2, OIDC).
• Automation with Python/Groovy/PowerShell and CI/CD practices.
• Experience in regulated environments (SOX, PCI DSS, HIPAA, ISO 27001).

Key Performance Indicators (KPIs)

• Mean Time to Resolve (MTTR) for L3 incidents and problems.
• Change success rate and rollback frequency for patches/upgrades.
• Compliance audit readiness and number of audit findings.
• Adapter and workflow deployment success rate; reconciliation accuracy.
• Platform uptime, performance metrics, and queue backlogs.
• Quality and completeness of documentation and runbooks.

Tools & Technologies

• IBM Security Identity Manager (ISIM), IBM Security Directory Server, IBM WebSphere Application Server
• IBM Security Directory Integrator (SDI), Tivoli, LDAP, Active Directory
• DB2, Oracle, SQL Server
• Linux/Unix, Shell, Python/PowerShell
• ServiceNow/Jira (ITSM/ITIL)
• Monitoring/Logging: Splunk, Prometheus/Grafana (or equivalent)