IAM ISIM L3 Engineer

Orbus International; India; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Orbus International seeks an IAM ISIM L3 Engineer to provide advanced support, maintenance, and enhancements for IBM Security Identity Manager within the enterprise IAM ecosystem.

The role handles complex troubleshooting, implements custom workflows and integrations, ensures platform stability, and aligns IAM operations with security, compliance, and audit requirements.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent.
• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
• Hands-on ISIM configuration, workflow development, policy management, and adapter development.
• Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.
• Experience with LDAP schemas, Active Directory, and identity repositories.
• Working knowledge of IBM WebSphere Application Server and relational databases (DB2/Oracle/SQL Server).
• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.
• Experience with ITIL processes (Incident, Problem, Change) and service management tools.
• Solid Linux/Unix fundamentals and shell scripting.
• Excellent analytical, troubleshooting, and communication skills.

Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
• Operate and tune application servers (e.g., IBM WebSphere) and underlying directories/databases (e.g., IBM Directory Server, DB2/Oracle).
• Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.
• Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM platforms.

Skills

Java/J2EE

JavaScript

XML

REST/SOAP APIs

Linux/Unix fundamentals

Shell scripting

IAM concepts

Incident/Problem management

Education

Bachelor's degree in Computer Science, Engineering, or equivalent

Tools

ISIM configuration

IBM WebSphere Application Server

LDAP / Active Directory

DB2 / Oracle / SQL Server

IBM Directory Server

SDI / Tivoli

Job description

Job Description: IAM ISIM L3 Engineer

Job Title

IAM ISIM L3 Engineer

Experience

7+ years in IAM with IBM Security Identity Manager

Role Overview

The IAM ISIM L3 Engineer provides advanced support, maintenance, and enhancements for IBM Security Identity Manager (ISIM) within the enterprise IAM ecosystem. This role handles complex troubleshooting, implements custom workflows and integrations, ensures platform stability, and aligns IAM operations with security, compliance, and audit requirements.

Key Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
• Operate and tune application servers (e.g., IBM WebSphere) and underlying directories/databases (e.g., IBM Directory Server, DB2/Oracle).
• Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.
• Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM platforms.

Required Qualifications

• Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
• Hands-on expertise with ISIM configuration, workflow development, policy management, and adapter development.
• Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.
• Experience with LDAP schemas, Active Directory, and identity repositories.
• Working knowledge of IBM WebSphere Application Server and relational databases (DB2/Oracle/SQL Server).
• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.
• Experience with ITIL processes (Incident, Problem, Change) and service management tools.
• Solid Linux/Unix fundamentals and shell scripting.
• Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

• IBM Security Directory Integrator (SDI) development and operations.
• Exposure to SailPoint, Okta, Azure AD, or other IAM/IAG platforms.
• Experience with identity governance, certification campaigns, and access reviews.
• Knowledge of cloud IAM (AWS/GCP/Azure) and modern auth standards (SAML, OAuth2, OIDC).
• Automation with Python/Groovy/PowerShell and CI/CD practices.
• Experience in regulated environments (SOX, PCI DSS, HIPAA, ISO 27001).

Key Performance Indicators (KPIs)

• Mean Time to Resolve (MTTR) for L3 incidents and problems.
• Change success rate and rollback frequency for patches/upgrades.
• Compliance audit readiness and number of audit findings.
• Adapter and workflow deployment success rate; reconciliation accuracy.
• Platform uptime, performance metrics, and queue backlogs.
• Quality and completeness of documentation and runbooks.

Tools & Technologies

• IBM Security Identity Manager (ISIM), IBM Security Directory Server, IBM WebSphere Application Server
• IBM Security Directory Integrator (SDI), Tivoli, LDAP, Active Directory
• DB2, Oracle, SQL Server
• Linux/Unix, Shell, Python/PowerShell
• ServiceNow/Jira (ITSM/ITIL)
• Monitoring/Logging: Splunk, Prometheus/Grafana (or equivalent)