IBM ISIM L3 Engineer

Orbus International; Kolkata District, Pune District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Orbus International in Kolkata invites an experienced IAM ISIM L3 Engineer to provide advanced support, maintenance, and enhancements for IBM Security Identity Manager within the enterprise IAM ecosystem.

The role emphasizes complex troubleshooting, custom workflows, and integrations to ensure platform stability, security alignment, and audit readiness. Requires 7+ years in IAM with ISIM and hands-on ISIM configuration.

Qualifications

• Bachelors degree or equivalent experience in CS/Engineering.
• 5+ years in Identity and Access Management with 3+ years in IBM ISIM.
• Hands-on ISIM configuration, workflow development, policy management, and adapter development.
• Strong Java/J2EE, JavaScript, XML; REST/SOAP APIs familiarity.

Responsibilities

• Own L3 incident and problem management for ISIM; drive root-cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with LDAP, AD, SAP, databases, Unix/Linux, cloud services.
• Operate and tune IBM WebSphere and databases (DB2/Oracle/SQL Server).
• Plan patches, upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for IAM tasks (lifecycle, reconciliation, access reviews).
• Collaborate with L2 support, IAM architects, security, audit, and stakeholders; document knowledge transfer.
• Maintain compliance with SOX/PCI/ISO controls; support internal/external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs.
• Contribute to standards, runbooks, and design patterns for ISIM.

Skills

Java/J2EE

JavaScript

XML

LDAP

Active Directory

IBM WebSphere

Linux/Unix

Shell scripting

REST APIs

SOAP APIs

ITIL

Troubleshooting

Education

Bachelor's degree in Computer Science or Engineering

Tools

ISIM

IBM Security Directory Server

IBM WebSphere

Job description

Job Title IAM ISIM L3 Engineer

Experience 7+ years in IAM with IBM Security Identity

Manager

Role Overview

The IAM ISIM L3 Engineer provides advanced support, maintenance, and enhancements for IBM

Security Identity Manager (ISIM) within the enterprise IAM ecosystem. This role handles

complex troubleshooting, implements custom workflows and integrations, ensures platform

stability, and aligns IAM operations with security, compliance, and audit requirements.

Key Responsibilities

• Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
• Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
• Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
• Operate and tune application servers (e.g., IBM WebSphere) and underlying directories/databases (e.g., IBM Directory Server, DB2/Oracle).
• Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
• Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
• Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
• Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
• Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.
• Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM platforms.

Required Qualifications

• Bachelors degree in Computer Science, Engineering, or equivalent experience.
• 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
• Hands-on expertise with ISIM configuration, workflow development, policy management, and adapter development.
• Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.
• Experience with LDAP schemas, Active Directory, and identity repositories.
• Working knowledge of IBM WebSphere Application Server and relational databases (DB2/Oracle/SQL Server).
• Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.
• Experience with ITIL processes (Incident, Problem, Change) and service management tools.
• Solid Linux/Unix fundamentals and shell scripting.
• Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

• IBM Security Directory Integrator (SDI) development and operations.
• Exposure to SailPoint, Okta, Azure AD, or other IAM/IAG platforms.
• Experience with identity governance, certification campaigns, and access reviews.
• Knowledge of cloud IAM (AWS/GCP/Azure) and modern auth standards (SAML, OAuth2, OIDC).
• Automation with Python/Groovy/PowerShell and CI/CD practices.
• Experience in regulated environments (SOX, PCI DSS, HIPAA, ISO 27001).

Key Performance Indicators (KPIs)

• Mean Time to Resolve (MTTR) for L3 incidents and problems.
• Change success rate and rollback frequency for patches/upgrades.
• Compliance audit readiness and number of audit findings.
• Adapter and workflow deployment success rate; reconciliation accuracy.
• Platform uptime, performance metrics, and queue backlogs.
• Quality and completeness of documentation and runbooks.

Tools & Technologies

• IBM Security Identity Manager (ISIM), IBM Security Directory Server, IBM WebSphere

Application Server

• IBM Security Directory Integrator (SDI), Tivoli, LDAP, Active Directory
• DB2, Oracle, SQL Server
• Linux/Unix, Shell, Python/PowerShell
• ServiceNow/Jira (ITSM/ITIL)
• Monitoring/Logging: Splunk, Prometheus/GrafanaRole & responsibilities

Preferred candidate profile