Senior ISAM Engineer - Access Control and Federation Modules

Job Description
Role:
Senior ISAM Engineer - Access Control and Federation Modules

Experience

Required:

6–8 years

Domain: Banking / Financial Services

Key Responsibilities

• Implement, configure, and support IBM Security Access Manager (ISAM) including Base, Advanced Access Control, and Federation modules
  .

• Design and manage junctions and configure policy server components such as ACLs, POPs, and group imports
  .

• Configure and support reverse proxy
  , authorization server
  , policy server
  , and LDAP integrations
  .

• Implement Single Sign-On (SSO) solutions using IBM Security Access Manager
  .

• Design and manage federated SSO solutions using SAML standards
  .

• Implement and support multi-factor authentication (MFA) and modern authentication mechanisms including OAuth, OAuth 2.0, and OpenID Connect (OIDC) within ISAM.

• Collaborate with application and infrastructure teams to support secure access for online banking and business applications
  .

• Ensure compliance with security, governance, and regulatory standards
  , particularly in BFSI environments.

Essential Skills & Qualifications

• Strong hands-on experience with ISAM Base, Advanced Access Control, and Federation modules
  .

• Proven experience in junction creation and policy server configuration (ACL, POP, group import).

• Solid understanding of reverse proxy architecture
  , authorization servers
  , policy servers
  , and LDAP
  .

• Hands-on experience configuring SSO and federated SSO using SAML 2.0.

• Strong understanding of identity and access management (IAM) concepts.

• Experience with
  MFA, OAuth, OAuth 2.0, and OIDC authentication mechanisms in ISAM.

Good-to-Have / Desirable Skills

• Experience with
  Ansible automation and Dev Ops tools
  .

• Knowledge of AWS security concepts and cloud-based IAM integrations.

• Exposure to Banking domain and Online Banking / Business Applications
  .

• Understanding of Ansible deployment and configuration management
  .

Keywords / Skills

• Digital: IBM Security Access Manager

• Cloud: Amazon Web Services (AWS)

• Automation / Ops: ignio AI.ERPOps

Requirements
Experience (Years): 4-6 Essential

Skills:

• Work with project teams throughout the organization to design, implement, and manage CDN infrastructure using Akamai, to ensure high availability, performance, and scalability for customer facing applications and business processes.
• Handle multiple priorities and assignments with excellence and precision.
• Be a part of a 24/7/365 organization (some after hours support is expected as part of normal on-call rotation).
• Directly support line of business development teams, provide guidance to them on implementation and changes for customer facing applications
• Develop and maintain security protocols and measures to protect CDN infrastructure from cyber threats.
• Monitor and analyze network performance, identifying and resolving issues to optimize content delivery of critical applications.
• Collaborate with cross-functional teams to integrate Akamai CDN solutions with existing systems and applications.
• Collaborate with information security teams to implement DDoS protection strategies and other security measures in the CDN.
• Provide technical support and guidance to clients and internal teams regarding CDN and security best practices.
• Work closely with vendor and professional service teams on delivery related activities and strategy.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. OR similar work experience.
• Strong understanding of network protocols (HTTP/HTTPS, DNS, TCP/IP).
• Proven experience as a CDN Engineer or similar role, with a strong focus on cybersecurity.
• In-depth knowledge of Content Delivery Network technologies, including caching, load balancing, and content optimization.
• Excellent problem-solving skills and attention to detail.
• Strong communication and teamwork abilities.
• Experience supporting 24/7/365 customer facing applications at enterprise scale.
• Awareness and experience with cybersecurity tools and practices, such as firewalls, intrusion detection/prevention systems, and encryption.
• Proficiency in scripting and automation (e.g., Python, Bash) a plus.
• Relevant certifications (e.g., CISSP, CEH) are a plus but not required.