IAM Engineer

IAM Engineer (SSO, MFA & Provisioning)

Role Overview

We are seeking an experienced IAM Engineer for a product consolidation project. This large-scale modernization program is focused on migrating applications from PingFederate and Duo to IBM Verify.

This role requires deep hands-on expertise in SSO, MFA, and provisioning technologies, with particular emphasis on understanding Ping-based configurations and executing efficient, repeatable application migrations at scale.

Key Responsibilities

• Migrate SSO and MFA integrations from PingFederate and Duo to IBM Verify Identity Access.
• Analyze existing SAML, OAuth 2.0, and OpenID Connect integrations and implement them in IBM Verify.
• Onboard, configure, test, and troubleshoot applications during migration.
• Work closely with application owners to gather requirements and coordinate migration activities.
• Support both SSO and provisioning use cases, including directory integrations.
• Review logs and resolve authentication, authorization, and federation issues.
• Contribute to scalable migration patterns supporting approximately 800 applications over a multi-year roadmap.

Required Skills & Experience

• Strong hands-on experience with SSO, MFA, and provisioning technologies.
• Experience implementing and supporting IBM Verify.
• Deep understanding of federation technologies (SAML, OAuth)
• Experience integrating applications with LDAP or enterprise directory services.
• Prior experience migrating or consolidating IAM platforms.

Nice-to-Have Skills

• Experience with large-scale IAM transformation initiatives.
• Expertise with PingFederate and Duo.
• Experience supporting global, multi-brand, multi-region enterprises.
• Ability to work in offshore delivery models with global time-zone overlap.
• Exposure to automation or AI-assisted migration approaches