IBM IVIA Engineer

Omegahires; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Omegahires in Hyderabad seeks an experienced IBM Verify Identity Access Engineer to architect, deploy, upgrade, and operate IBM Verify Identity Access across AWS, Azure, and on-prem environments. You will design high-availability, multi-region topologies and lead automation through GitLab CI/CD pipelines.

The role includes performance tuning, DR/BCP planning, and implementing IaC standards, with strong focus on Kubernetes, GitOps, and cross-cloud connectivity.

Qualifications

• Architect, deploy, upgrade, and operate IBM Verify Identity Access implementations across multiple environments.
• Design and maintain highly available topologies across regions.

Responsibilities

• Architect, deploy, upgrade, and operate IBM Verify Identity Access implementations and supporting components (IBM Verify Directory) across Virtual Appliance, Kubernetes, AWS, and Azure environments.
• Design and maintain Active-Active (CRDB), Active-Passive, multi-region high-availability topologies.
• Define and enforce sizing, capacity planning, persistence, eviction, and memory optimization strategies for mission-critical workloads.
• Manage IBM Verify Identity Access Operator and related components Operators on Kubernetes, including CRDs, REC/REDB resources, rolling upgrades, and version lifecycle management.
• Perform performance tuning, latency analysis, and benchmarking to meet SLOs.
• Implement backup, restore, disaster recovery (DR), and business continuity (BCP) procedures with documented RTO/RPO targets.
• Build and maintain cloud infrastructure on AWS (VPC, EKS, IAM, KMS, Route53, PrivateLink) and Azure (AKS, VNet, Private Link, Key Vault, Entra ID).
• Operate Kubernetes clusters: networking (CNI), ingress, service mesh, storage classes, PV/PVC, node pools, autoscaling, and pod security.
• Manage container images, Helm charts, Kustomize overlays, and GitOps workflows (Argo CD/Flux) for IBM Verify Identity Access and supporting services.
• Ensure cross-cloud connectivity, DNS, certificate management (cert-manager), and secret management (Vault, AWS Secrets Manager, Azure Key Vault).
• Develop automation modules for reproducible environments.
• Automate routine operations using Ansible, Python, Bash, or Go.
• Maintain golden pipelines and reusable templates for infrastructure delivery.
• Enforce IaC standards: module versioning, remote state, state locking, drift detection, and policy-as-code (OPA).
• Design, build, and optimize GitLab CI/CD pipelines for infrastructure and IBM Verify Identity Access platform deployments.
• Implement multi-stage pipelines with linting, security scanning, approvals, and progressive delivery.
• Manage GitLab runners (Kubernetes/Docker executors), CI variables, environments, protected branches, and deployment gates.
• Integrate automated testing, policy enforcement, and compliance checks into pipelines.
• Promote GitOps and trunk-based development practices across the team.
• Implement end-to-end observability using IBM provided tooling/metrics and/or Prometheus, Grafana, OpenTelemetry, ELK/Loki, and APM tools (Dynatrace).
• Define SLIs, SLOs, and error budgets for IBM Verify Identity Access services.

Tools

GitLab Pipelines

Terraform

Ansible

AWS

Kubernetes

IBM IVIA

OAuth

Job description

Skills: IBM IVIA product and OAUTH, Gitlab Pipelines, Terraform/ Ansible/ AWS, Kubernetes

IBM Verify Identity Access Platform Ownership

• Architect, deploy, upgrade, and operate IBM Verify Identity Access implementations and supporting components (IBM Verify Directory) across Virtual Appliance, Kubernetes, AWS, and Azure environments.
• Design and maintain Active-Active (CRDB), Active-Passive, multi-region high-availability topologies.
• Define and enforce sizing, capacity planning, persistence (AOF/RDB), eviction, and memory optimization strategies for mission-critical workloads.
• Manage IBM Verify Identity Access Operator and related components Operators on Kubernetes, including CRDs, REC/REDB resources, rolling upgrades, and version lifecycle management.
• Perform performance tuning, latency analysis, and benchmarking to meet SLOs.
• Implement backup, restore, disaster recovery (DR), and business continuity (BCP) procedures with documented RTO/RPO targets.
• Build and maintain cloud infrastructure on AWS (VPC, EKS, IAM, KMS, Route53, PrivateLink) and Azure (AKS, VNet, Private Link, Key Vault, Entra ID).
• Operate Kubernetes clusters: networking (CNI), ingress, service mesh, storage classes, PV/PVC, node pools, autoscaling, and pod security.
• Manage container images, Helm charts, Kustomize overlays, and GitOps workflows (Argo CD/Flux) for IBM Verify Identity Access and supporting services.
• Ensure cross-cloud connectivity, DNS, certificate management (cert-manager), and secret management (Vault, AWS Secrets Manager, Azure Key Vault).

Infrastructure as Code & Automation

Required -

• Develop, review, and maintain automation modules for reproducible, environment-agnostic
• Automate routine operations using Ansible, Python, Bash, or Go to eliminate manual toil.
• Maintain golden pipelines and reusable templates for infrastructure delivery.

Preferred –

Enforce IaC standards: module versioning, remote state, state locking, drift detection, and policy-as-code (OPA).

• Design, build, and optimize GitLab CI/CD pipelines for infrastructure, configuration, and IBM Verify Identity Access platform deployments.
• Implement multi-stage pipelines with linting, security scanning (SAST, IaC scanning, dependency scanning, secret detection), approvals, and progressive delivery.
• Manage GitLab runners (Kubernetes/Docker executors), CI variables, environments, protected branches, and deployment gates.
• Integrate automated testing, policy enforcement, and compliance checks into pipelines.
• Promote GitOps and trunk-based development practices across the team.

Observability, Reliability & Performance

• Implement end-to-end observability using IBM provided tooling/metrics and/or Prometheus, Grafana, OpenTelemetry, ELK/Loki, and APM tools (Dynatrace).
• Define SLIs, SLOs, and error budgets for IBM Verify Identity Access services.
• Conduct capacity forecasting, load testing, and chaos engineering exercises to validate resilience.
• Drive continuous improvement of MTTD and MTTR through automation and runbooks. Incident & Problem Management
• Participate in 24x7 on-call rotation; lead response for Sev-1/Sev-2 incidents impacting IBM Verify Identity Access or dependent services (eg IBM Verify Directory).
• Drive incident command, communication, mitigation, and recovery in line with ITIL incident management practices.
• Maintain and continuously improve runbooks, playbooks, and on-call documentation.

Change & Release Management

• Plan and execute changes following ITIL change management: RFCs, CAB reviews, risk assessment, rollback plans, and maintenance windows.
• Coordinate cross-team release activities and communicate impact to stakeholders.
• Maintain accurate CMDB entries, configuration baselines, and dependency mappings for IBM Verify Identity Access assets and related supporting components.

Security, Compliance & Governance

• Implement security best practices: TLS in-transit, encryption at rest, RBAC/ACLs, network policies, private endpoints, and least-privilege IAM.
• Manage secrets rotation, certificate lifecycle, vulnerability remediation, and patching SLAs.
• Support audits and compliance frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR) with evidence and controls.
• Partner with security teams on threat modeling, hardening, and zero-trust initiatives.
• Partner with application, data, SRE, security, and platform teams to onboard workloads onto IBM Verify Identity Access implementations with best-practice patterns.
• Conduct code/IaC reviews and architecture reviews.
• Produce high-quality technical documentation, ADRs, HLD/LLD diagrams, and knowledge base articles.
• Contribute to platform roadmap, backlog grooming, and quarterly planning.
• Evaluate new IBM Verify Identity Access features, modules, and emerging technologies as they become available in newer versions of the product suite.
• Drive automation-first culture to reduce manual operations and improve developer self-service.
• Identify and execute reliability, scalability, and performance improvement initiatives.