Job Summary

We are looking for a Customer IAM Engineer with hands-on experience in on-premises authentication and access management solutions such as IBM Security Verify Access (IVIA/ISVA), Ping Identity, or similar IAM platforms. The role involves implementing and supporting authentication, SSO, federation, application onboarding, troubleshooting, upgrades, and production support.

Key Responsibilities

- Implement and support customer authentication solutions using IBM IVIA/ISVA, Ping Identity, or similar IAM products.
- Configure authentication and access policies, reverse proxies, web access management, and session management.
- Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect, and LDAP.
- Support federation integrations with external identity providers and business partners.
- Develop and modify authentication workflows, mapping rules, and identity attribute transformations.
- Integrate IAM platforms with LDAP, Active Directory, databases, APIs, and downstream applications.
- Troubleshoot SSO, authentication, token, certificate, session, and application-access issues.
- Support platform upgrades, patching, certificate renewals, and vulnerability remediation.
- Participate in application onboarding, solution design, testing, deployment, and documentation.




- Provide production support and participate in incident, problem, and change management.
- Collaborate with application, infrastructure, security, network, and vendor teams.
- Maintain technical documentation, operational procedures, and knowledge-base articles.

Required Skills
- 37 years of overall IT experience, with at least 2 years of hands-on IAM or customer authentication experience.
- Experience with at least one of the following:
- IBM Security Verify Access (IVIA/ISVA), including WebSEAL or Advanced Access Control.
- PingFederate, PingAccess, PingDirectory, or related Ping Identity products.
- Comparable on-premises authentication or federation platforms.
- Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, SSO, and federation.
- Knowledge of LDAP, Active Directory, JWT, access tokens, and ID tokens.
- Experience with TLS certificates, keystores, truststores, authentication sessions, cookies, and reverse proxies.
- Troubleshooting experience using logs, browser developer tools, SAML tracing, and API testing tools.
- Working knowledge of Linux/Unix and basic scripting.
- Familiarity with high availability, load balancing, and multi-setting deployments.

📌 Customer IAM Engineer (Chennai)
🏢 Orcapod Consulting Services
📍 Chennai