Senior IBM (ISAM/ISVA) Engineer

Airitos, LLC; India; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Airitos, LLC is seeking a senior IBM ISAM/ISVA Engineer to design, deploy, and operationalize a secure access management platform. The role requires hands-on setup of full ISAM/ISVA infrastructure, clustering, DR, and enterprise integration.

Remote in India, you will own end-to-end deployment and performance considerations at scale. The ideal candidate has experience building resilient ISAM/ISVA environments and a strong background in security, networking, and DevOps practices to run the

Qualifications

• 5+ years hands-on experience with IBM ISAM/ISVA.
• Experience deploying ISAM/ISVA from scratch in enterprise environments.
• Strong experience with ISVA virtual appliances and Web Reverse Proxy configuration.
• Proficiency in federation protocols (SAML, OIDC, OAuth).
• LDAP/AD integration and networking fundamentals (load balancers, TLS).
• Experience in Linux systems, scripting, and automation.

Responsibilities

• Design and implement enterprise-grade ISAM/ISVA architecture.
• Install and configure ISVA components and WRP.
• Configure clustered deployments for scalability and redundancy.
• Plan multi-tier DEV/QA/PROD environments and secure baselines.
• Implement HA/DR, including data center deployment and failover testing.
• Automate appliance configuration using REST APIs and scripting.
• Provide documentation and handoff to operations teams.

Skills

ISAM/ISVA expertise

Security architecture

Scripting & automation

Linux & networking

Troubleshooting

Tools

ISAM/ISVA tools

Web Reverse Proxy

LDAP/AD integration

Load balancers

Job description

We are seeking a senior-level IBM Security Access Manager (ISAM) / IBM Security Verify Access (ISVA) Engineer with deep expertise in designing, deploying, and operationalizing secure access management platforms from the ground up.

This role requires hands-on experience standing up the full ISAM/ISVA infrastructure, configuring clustering and high availability, implementing disaster recovery, and integrating the platform into complex enterprise environments. This is not a support-only or configuration-only role — the ideal candidate has built resilient ISAM/ISVA environments end-to-end and understands the infrastructure, networking, security, and performance considerations required to run the platform at enterprise scale.

This position is remote, but must be a resident in India

Key Responsibilities

Architecture & Platform Deployment

• Design and implement enterprise-grade ISAM / ISVA architecture
• Install and configure:
  • ISVA Virtual Appliances (Access Control, Federation, Advanced Access Control)
  • Web Reverse Proxy (WRP)
  • Policy Server
  • Runtime components
• Configure clustered deployments for scalability and redundancy
• Design and implement multi-tier environments (DEV, QA, PROD)
• Implement secure baseline configurations aligned with enterprise standards

High Availability & Disaster Recovery

• Design and configure:
  • Appliance clustering
  • Runtime high availability
  • Session failover and replication
  • Load balancing strategies (F5, Netscaler, etc.)
• Implement multi-data center deployments where required
• Develop and test disaster recovery procedures
• Configure database replication (if applicable)
• Perform failover and resiliency testing

Integration & Security Implementation

• Integrate ISAM/ISVA with:
  • Active Directory / LDAP
  • SAML 2.0 / OIDC / OAuth providers
  • Enterprise applications (on-prem and cloud)
  • MFA providers
  • API gateways
• Implement:
  • Reverse proxy junctions
  • Access control policies
  • Federation trust relationships
  • Adaptive authentication and step-up authentication
• Configure advanced access control policies and contextual risk-based access

Performance & Optimization

• Tune reverse proxy performance and connection handling
• Optimize authentication flows and federation transactions
• Conduct performance testing and capacity planning
• Troubleshoot latency, session issues, and authentication failures

Automation & DevOps

• Automate appliance configuration using REST APIs and scripting
• Develop deployment automation (Shell, Python, Ansible, etc.)
• Support CI/CD integration for configuration promotion
• Implement configuration backup and version control processes

Documentation & Knowledge Transfer

• Produce detailed architecture and topology diagrams
• Document build procedures and operational runbooks
• Provide structured handoff to operations/support teams

Required Qualifications

• 5+ years of hands-on experience with IBM ISAM / ISVA
• Proven experience deploying ISAM/ISVA from scratch in enterprise environments
• Strong experience with:
  • ISVA virtual appliances
  • Web Reverse Proxy configuration
  • Federation (SAML, OIDC, OAuth)
  • LDAP and Active Directory integration
  • Load balancers and networking fundamentals
• Demonstrated experience designing and implementing high availability and disaster recovery solutions
• Strong understanding of authentication protocols and identity federation
• Experience with Linux systems and networking (DNS, TLS, certificates)
• Strong scripting and automation skills

Preferred Qualifications

• Experience migrating from ISAM to ISVA
• Experience with containerized ISVA deployments
• Experience integrating ISVA with API security platforms
• Knowledge of zero trust architecture principles
• Experience in financial services, healthcare, or other regulated industries
• Security certifications (CISSP, CISM) or IAM-specific certifications

Key Competencies

• Infrastructure-level expertise (not just policy configuration)
• Strong troubleshooting and root cause analysis skills
• Ability to design scalable, resilient, and secure access architectures
• Strong documentation and communication skills
• Ability to independently own platform build and lifecycle

What Success Looks Like

• Fully operational ISAM/ISVA environment built and hardened from the ground up
• High availability architecture successfully implemented and tested
• Federation and access policies securely integrated across enterprise systems
• Clean documentation and operational handoff
• Stable, scalable access management platform ready for production