Track Lead

Job Responsibilities:

• Application Onboarding (Primary Responsibility): Design, develop, test, and implement onboarding of B2E (Employee applications), B2B / B2C / B2B2C applications. Integrate applications into ISAM SSO/MFA platforms. Configure federations using SAML 2.0 and OpenID Connect (OIDC). Perform end-to-end onboarding lifecycle including design, build, testing, and go-live.
• ISAM / SSO Solution Engineering: Engineer and configure ISAM SSO authentication solutions. Support federation setup with multiple Identity Providers and service providers. Integration with enterprise and external applications. Develop secure authentication flows for applications. Ensure compatibility with enterprise identity architecture.
• MFA Engineering & Authentication Design: Design and implement multi-factor authentication (MFA) solutions using ISAM, including OTP-based authentication, token-based authentication, certificate-based authentication, and adaptive/risk-based authentication and device registration. Implement authentication across web applications, VPN / remote access, and internal and external access channels.
• Authentication Policy Engineering: Create and configure MFA policies and conditional access policies. Enhance authentication security posture by aligning policies to enterprise standards and enforcing access controls for applications. Implement policy updates as part of onboarding or new integrations.
• Azure AD / Identity Platform Integration (ISAM Context Only): Perform engineering work related to application onboarding into Azure AD (as part of SSO ecosystem), MFA enforcement policies, and conditional access configuration. Configure AAD integrations with ISAM-based authentication flows.
• Identity Platform Capacity & Enhancement Work: Support capacity-related engineering activities, including identity platform scaling and authentication system capacity improvements. Perform design-level enhancements as part of onboarding or transformation initiatives.
• Testing & Implementation: Conduct integration testing, functional/authentication testing, and validation of dependent use cases. Ensure all onboarding implementations meet security requirements and authentication and authorization standards before release.

Explicit Activities Covered Under Fixed Capacity:

• Application onboarding to SSO/MFA identity platform
• Designing and implementing authentication integrations
• MFA policy creation
• Conditional access policy configuration
• Support for Azure AD onboarding and identity integration
• Identity platform engineering improvements

Job Summary:

The ISAM Engineer will be responsible for engineering-focused activities under fixed capacity scope, primarily involving application onboarding into ISAM-based SSO/MFA platforms, design and implementation of authentication solutions, and policy configuration and identity integrations. This role is NOT operational/BAU, and focuses only on non-standard, project-based engineering work.

Skill Requirements:

• Technical Skills: IBM Security Access Manager (ISAM) – Mandatory, SSO technologies: SAML, OAuth, OpenID Connect, MFA implementations and authentication frameworks, Identity federation and IdP integration, Azure AD / Entra ID (integration level), Understanding of authentication flows and security architecture.
• Engineering Skills: Application onboarding design and execution, Identity solution architecture exposure, Troubleshooting complex integration issues (L3-level engineering), Ability to design secure authentication workflows.

Deliverables (Measurable Outputs):

• Successful onboarding of applications into ISAM SSO/MFA platform
• Configured and tested authentication integrations
• MFA policies and conditional access implementations
• Secure authentication architecture for onboarded apps
• Tested and production-ready identity integrations