: IAM ISIM L3 Engineer

Department / Tower

IAM

Location

CHENNAI

Employment Type

Full time

Experience

10+ years in IAM with IBM Security Identity Manager

Role Overview The IAM ISIM L3 Engineer provides advanced support, maintenance, and enhancements for IBM Security Identity Manager (ISIM) within the enterprise IAM ecosystem. This role handles complex troubleshooting, implements custom workflows and integrations, ensures platform stability, and aligns IAM operations with security, compliance, and audit requirements.

Key Responsibilities

- Own L3 incident and problem management for ISIM, driving root cause analysis and permanent fixes.
- Configure and customize ISIM components (workflows, provisioning policies, service types, roles, entitlements) using Java/J2EE, JavaScript, XML.
- Develop and maintain ISIM adapters/connectors; integrate with target systems (LDAP, Active Directory, SAP, databases, Unix/Linux, cloud services).
- Operate and tune application servers (e.g., IBM WebSphere) and underlying directories/databases (e.g., IBM Directory Server, DB2/Oracle).
- Plan and execute patches, version upgrades, and migrations; coordinate change management and rollback strategies.
- Implement automation and scripting for routine IAM tasks (user lifecycle, reconciliation, access reviews, reporting).
- Collaborate with L2 support, IAM architects, security, audit, and business stakeholders; provide knowledge transfer and documentation.
- Maintain compliance with organizational security standards, SOX/PCI/ISO controls; support internal and external audits.
- Monitor platform health, performance, and queues; build dashboards and scheduled jobs to proactively prevent incidents.
- Contribute to standards, runbooks, and design patterns for ISIM and adjacent IAM platforms.

Required Qualifications

- Bachelor’s degree in Computer Science, Engineering, or equivalent experience.
- 5+ years in Identity and Access Management with 3+ years focused on IBM Security Identity Manager (ISIM).
- Hands-on expertise with ISIM configuration, workflow development,



policy management, and adapter development.
- Strong proficiency in Java/J2EE, JavaScript, XML; familiarity with REST/SOAP APIs.
- Experience with LDAP schemas, Active Directory, and identity repositories.
- Working knowledge of IBM WebSphere Application Server and relational databases (DB2/Oracle/SQL Server).
- Understanding of IAM concepts: RBAC/ABAC, provisioning/de-provisioning, reconciliation, identity governance.
- Experience with ITIL processes (Incident, Problem, Change) and service management tools.
- Solid Linux/Unix fundamentals and shell scripting.
- Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

- IBM Security Directory Integrator (SDI) development and operations.
- Exposure to SailPoint, Okta, Azure AD, or other IAM/IAG platforms.
- Experience with identity governance, certification campaigns, and access reviews.
- Knowledge of cloud IAM (AWS/GCP/Azure) and modern auth standards (SAML, OAuth2, OIDC).
- Automation with Python/Groovy/PowerShell and CI/CD practices.
- Experience in regulated environments (SOX, PCI DSS, HIPAA, ISO 27001).

Key Performance Indicators (KPIs)

- Mean Time to Resolve (MTTR) for L3 incidents and problems.
- Change success rate and rollback frequency for patches/upgrades.
- Compliance audit readiness and number of audit findings.
- Adapter and workflow deployment success rate; reconciliation accuracy.
- Platform uptime, performance metrics, and queue backlogs.
- Quality and completeness of documentation and runbooks.

Working Model 5 days working from office with on-call rotation for Priority-1 incidents. Collaborate across global teams and time zones. Participate in CABs, sprint ceremonies (if agile), and periodic after-hours maintenance windows as needed.

Tools & Technologies

- IBM Security Identity Manager (ISIM), IBM Security Directory Server, IBM WebSphere Application Server
- IBM Security Directory Integrator (SDI), Tivoli, LDAP, Active Directory
- DB2, Oracle, SQL Server
- Linux/Unix, Shell, Python/PowerShell
- ServiceNow/Jira (ITSM/ITIL)
- Monitoring/Logging: Splunk, Prometheus/Grafana (or equivalent)

📌 ISIM (Chennai)
🏢 Tata Consultancy Services
📍 Chennai