IBM ISAM Security Engineer

This position will be responsible for consulting with various groups to plan, architect and implement standards-based solutions in the areas of general identity management, directory, and security. Provides administrative support for several infrastructures related to web applications, identity management and the components surrounding these technologies Specifically IBM Security Access Manager and Okta Auth0. These include areas such as SharePoint, WebSphere, IIS, Tomcat, Apache, EpiServer, Proxy Internet Access, Oracle Access Manager, CMS Systems, Federation Services, Monitoring and F5 Content Switches. Also has responsibilities for Internet security, integration of 3rd party applications, domain name / SSL certificate administration and documentation.

Responsibilities

- Direct responsibilities on the operational team for developing and maintaining integrated strategies and solutions, with a focus on Web Access Management services for the Global environment. Web Access Management services include the following core technologies: Okta Auth0, Ping, IBM ISAM, and Federation Services.

- Identify opportunities for using Web Access Management to leverage single sign on security with an emphasis on cost containment/reduction strategies.

- Provide assistance in project management and feasibility analysis on potential future projects.

- Support Web Access Management Systems applications and Integrations.

- Assist in documentation highlighting integration, design and SSO features of solutions.

- Provide technical assistance for internal/external customer engagements. Assist in automation and building repeatable patterns for consumption.

- Perform day to day operations to maintain SLAs and business functions

- Runs small to medium enterprise infrastructure projects from requirements gathering to post-implementation.

- Helps in the performance and availability of the Web Services environment through monitoring, patching, software tools, and process improvements

- Complies with information security policies

- Solid knowledge of project management methodologies; able to manage project phases or less complex projects

- Provide documentation highlighting integration, design, and features of solutions.

Qualifications

- Knowledge and experience in working with IBM Security Access Manager and Okta Auth0

- Experience at delivering technology solutions at an enterprise level.

- Diagnostic and troubleshooting skills, and the ability to excel under pressure

- Developed written and verbal skills, assignment and priority flexibility, and time management skills

- Understanding of DNS, TCP/IP addressing and networking (Internet, routers, switches)

- Knowledge of Web Services, Web and Application Services, Java and .NET technologies, and cloud services.

- Background in scripting, code development such as PowerShell, Ansible, Java, Terraform, etc.

- Ability to work in teams on small to medium projects.

- Excellent understanding of cloud and on-prem based infrastructure solutions and their Access Management needs.

- Ability to quickly learn and apply new concepts.

- Ability to drive and achieve consenssupport from large diverse groups.

- Written and verbal communication skills enabling effective articulation of strategy.

- Able to understand how concepts apply to design or architectural efforts

- Enterprise network security technologies including firewalls, IDS, IPS, NAC, WAF, and Web Proxies

- Working knowledge of Certificate/CA/PKI infrastructure

- Possesses and applies broad knowledge of concepts and principles or exhibits technical expertise related to server infrastructure and web-based application support.

- A four-year computer science or related technical degree or minimum of 5 (five) years of solid related work experience.

- Breadth of knowledge across many technology disciplines; including various access management solutions

Preferred Qualifications

- Experience in federation using SAML 2.0, Open ID connect, REST, oAuth standards

- Understanding of SDS and experience with managing HA replicas

- Managing environments 500K-1MM external users

- Understanding of SAML and SSO federated identities

- Experience with installing, upgrading, and configuring Okta Auth0, ISAM/Security Access Manager/WebSEAL version 7.x, ISAM 9-10

- Access Management: Web security, Authentication, Authorization, Kerberos, Session Management, Web Proxy, Risk-Based Access

- Understanding of microservices-based architecture, API based system integration and Amazon Web Services cloud Identity & Access

- Understanding of working in a hybrid cloud environment and working knowledge of AWS Cloud Principles.

- Knowledge in scripting, code development such as PowerShell, Ansible, Java, .NET, etc. and automating developments by code

- Ability to work in teams on small to medium projects.

- Excellent understanding of cloud and on-prem based infrastructure solutions and their Access Management needs.

- Understanding of microservices-based architecture, API based system integration and Amazon Web Services cloud Identity & Access

- A four-year computer science or related technical degree or equivalent experience

- Hands on experience mentoring small to medium teams

- Ability to convert complex information into simple, explainable solutions.

- Possesses a planning orientation with integrative and strategic thinking skills.

- Demonstrated project management and client relationship skills.

- Understanding of a zero trust network environment.

Working Conditions

Non-traditional work hours may be required.

Direct responsibilities on the operational team for developing and maintaining integrated strategies and solutions, with a focus on Web Access Management services for the Global environment. Web Access Management services include the following core technologies: Okta Auth0, Ping, IBM ISAM, and Federation Services.

- Identify opportunities for using Web Access Management to leverage single sign on security with an emphasis on cost containment/reduction strategies.

- Provide assistance in project management and feasibility analysis on potential future projects.

- Support Web Access Management Systems applications and Integrations.

- Assist in documentation highlighting integration, design and SSO features of solutions.

- Provide technical assistance for internal/external customer engagements. Assist in automation and building repeatable patterns for consumption.

- Perform day to day operations to maintain SLAs and business functions

- Runs small to medium enterprise infrastructure projects from requirements gathering to post-implementation.

- Helps in the performance and availability of the Web Services environment through monitoring, patching, software tools, and process improvements

- Complies with information security policies

- Solid knowledge of project management methodologies; able to manage project phases or less complex projects

- Provide documentation highlighting integration, design, and features of solutions.

Knowledge and experience in working with IBM Security Access Manager and Okta Auth0

- Experience at delivering technology solutions at an enterprise level.

- Diagnostic and troubleshooting skills, and the ability to excel under pressure

- Developed written and verbal skills, assignment and priority flexibility, and time management skills

- Understanding of DNS, TCP/IP addressing and networking (Internet, routers, switches)

- Knowledge of Web Services, Web and Application Services, Java and .NET technologies, and cloud services.

- Background in scripting, code development such as PowerShell, Ansible, Java, Terraform, etc.

- Ability to work in teams on small to medium projects.

- Excellent understanding of cloud and on-prem based infrastructure solutions and their Access Management needs.

- Ability to quickly learn and apply new concepts.

- Ability to drive and achieve consenssupport from large diverse groups.

- Written and verbal communication skills enabling effective articulation of strategy.

- Able to understand how concepts apply to design or architectural efforts

- Enterprise network security technologies including firewalls, IDS, IPS, NAC, WAF, and Web Proxies

- Working knowledge of Certificate/CA/PKI infrastructure

- Possesses and applies broad knowledge of concepts and principles or exhibits technical expertise related to server infrastructure and web-based application support.

- A four-year computer science or related technical degree or minimum of 5 (five) years of solid related work experience.

- Breadth of knowledge across many technology disciplines; including various access management solutions