Track Lead - IAM Service Delivery

Job Summary

Job Responsibilities : Core Responsibilities 1. Application Onboarding (Primary Responsibility)

• Design, develop, test, and implement onboarding of: o B2E (Employee applications) o B2B / B2C / B2B2C applications
• Integrate applications into ISAM SSO/MFA platforms
• Configure federations using: o SAML 2.0 o OpenID Connect (OIDC)
• Perform end-to-end onboarding lifecycle including design, build, testing, and go-live ________________________________________ 2. ISAM / SSO Solution Engineering
• Engineer and configure ISAM SSO authentication solutions
• Support: o Federation setup with multiple Identity Providers and service providers o Integration with enterprise and external applications
• Develop secure authentication flows for applications
• Ensure compatibility with enterprise identity architecture ________________________________________ 3. MFA Engineering & Authentication Design
• Design and implement multi-factor authentication (MFA) solutions using ISAM: o OTP-based authentication o Token-based authentication o Certificate-based authentication o Adaptive/Risk-based authentication and device registration
• Implement authentication across: o Web applications o VPN / remote access o Internal and external access channels ________________________________________ 4. Authentication Policy Engineering
• Create and configure: o MFA policies o Conditional access policies
• Enhance authentication security posture by: o Aligning policies to enterprise standards o Enforcing access controls for applications
• Implement policy updates as part of onboarding or new integrations ________________________________________ 5. Azure AD / Identity Platform Integration (ISAM Context Only)
• Perform engineering work related to: o Application onboarding into Azure AD (as part of SSO ecosystem) o MFA enforcement policies o Conditional access configuration
• Configure AAD integrations with ISAM-based authentication flows ________________________________________ 6. Identity Platform Capacity & Enhancement Work
• Support capacity-related engineering activities: o Identity platform scaling o Authentication system capacity improvements
• Perform design-level enhancements as part of onboarding or transformation initiatives ________________________________________ 7. Testing & Implementation
• Conduct: o Integration testing o Functional/authentication testing o Validation of dependent use cases
• Ensure all onboarding implementations meet: o Security requirements o Authentication and Authorization standards before release ________________________________________ Explicit Activities Covered Under Fixed Capacity The role must include the following activities:
• Application onboarding to SSO/MFA identity platform
• Designing and implementing authentication integrations
• MFA policy creation
• Conditional access policy configuration
• Support for Azure AD onboarding and identity integration
• Identity platform engineering improvements

Job Summary : The ISAM Engineer will be responsible for engineering-focused activities under fixed capacity scope, primarily involving:

• Application onboarding into ISAM-based SSO/MFA platforms
• Design and implementation of authentication solutions
• Policy configuration and identity integrations This role is NOT operational/BAU, and focuses only on non-standard, project-based engineering work.

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Technical Skills:

• IBM Security Access Manager (ISAM) - Mandatory
• SSO technologies: SAML, OAuth, OpenID Connect
• MFA implementations and authentication frameworks
• Identity federation and IdP integration
• Azure AD / Entra ID (integration level)
• Understanding of authentication flows and security architecture Engineering Skills:
• Application onboarding design and execution
• Identity solution architecture exposure
• Troubleshooting complex integration issues (L3-level engineering)
• Ability to design secure authentication workflows ________________________________________ Deliverables (Measurable Outputs)
• Successful onboarding of applications into ISAM SSO/MFA platform
• Configured and tested authentication integrations
• MFA policies and conditional access implementations
• Secure authentication architecture for onboarded apps
• Tested and production-ready identity integrations

Other Requirements

NA