We are seeking a highly experienced IBM Security Identity Manager (ISIM) / IBM Security Verify Governance (ISVG) Engineer who can architect, deploy, and operationalize enterprise-grade identity governance solutions from the ground up. This role requires deep expertise in standing up the full platform infrastructure, configuring high availability and disaster recovery, and integrating ISIM/ISVG into complex enterprise environments.
This is not a support-only or application-level administration role. The ideal candidate has designed and implemented ISIM/ISVG environments end-to-end and understands the underlying middleware, infrastructure, and performance architecture required to run the platform reliably at scale.
Key ResponsibilitiesPlatform Architecture & DeploymentDesign and implement IBM ISIM / ISVG architecture for enterprise environments
Install and configure:
WebSphere Application Server (WAS / Liberty)
IBM DB2 (or supported RDBMS)
LDAP directories (e.g., IBM SDS, AD, etc.)
IBM HTTP Server / load balancers
Build multi-tier environments (DEV, QA, PROD) following best practices
Configure clustering for WebSphere and ISIM application components
Implement secure configuration aligned with enterprise security standards
Architect and configure:
WebSphere clustering
Database HA (HADR, clustering, replication)
LDAP replication
Load balancing and failover strategies
Develop and test disaster recovery procedures
Implement backup and recovery strategies
Perform failover testing and performance tuning
Integrate ISIM/ISVG with:
Active Directory
HR systems
Target applications (via adapters or APIs)
SSO / Federation systems
Configure workflows, provisioning policies, access governance, and certifications
Develop and customize adapters where necessary
Implement role-based access control (RBAC) models
Tune JVMs, connection pools, and database performance
Optimize reconciliation and provisioning performance
Conduct capacity planning and scaling analysis
Monitor and resolve system bottlenecks
Automate builds and deployments using scripting (Shell, Python, Ansible, etc.)
Develop environment provisioning scripts
Support CI/CD integration where applicable
Maintain infrastructure-as-code where possible
Create detailed architecture diagrams and build documentation
Develop operational runbooks
Provide handover documentation to support teams
5+ years of hands-on experience with IBM ISIM / ISVG
Proven experience building ISIM/ISVG environments from scratch
Strong experience with:
WebSphere Application Server (ND or Liberty)
DB2 administration and tuning
LDAP configuration and replication
Linux system administration
Demonstrated experience implementing high availability and DR for ISIM/ISVG
Strong understanding of identity governance concepts (IGA, RBAC, certification campaigns, SoD)
Experience integrating with Active Directory and enterprise systems
Strong scripting skills (Shell, Python, etc.)
Experience working in enterprise production environments
Experience migrating from ISIM to ISVG
Experience with containerization (OpenShift / Kubernetes) for ISVG deployments
Familiarity with IBM Security Verify SaaS offerings
Knowledge of enterprise load balancers (F5, Netscaler)
Experience in regulated industries (financial services, healthcare, government)
Security certifications (CISSP, CISM) or IAM-specific certifications
Deep infrastructure-level understanding (not just application configuration)
Strong troubleshooting and root cause analysis skills
Ability to design scalable and resilient architectures
Strong documentation and communication skills
Independent ownership of platform lifecycle
Fully operational ISIM/ISVG environment built from the ground up
High availability and failover successfully tested
Clean architecture documentation and operational handoff
Stable, scalable identity governance platform ready for enterprise production use
