IAM Support engineer

Job Description – IAM Support Engineer (WebSEAL, Keycloak & LDAP)

We are looking for an experienced Identity and Access Management (IAM) Engineer with strong expertise in IBM Security Verify Access WebSEAL, Keycloak, and LDAP technologies to manage secure authentication, authorization, and user access across enterprise applications.

Key Responsibilities:

Configure, administer, and support WebSEAL reverse proxy environments for secure application access.

Implement and manage Keycloak for Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, and OAuth/OpenID Connect integrations.

Manage LDAP directories including user provisioning, group management, authentication flows, and directory synchronization.

Integrate enterprise applications with IAM solutions using SAML, OAuth 2.0, OpenID Connect, and LDAP protocols.

Troubleshoot authentication, authorization, and access-related issues across environments.

Perform certificate management, SSL configuration, and secure communication setup.

Monitor IAM infrastructure performance, logs, and security events.

Collaborate with infrastructure, security, and application teams for onboarding and access governance.

Support production deployments, patches, upgrades, and migration activities.

Create and maintain technical documentation, SOPs, and architecture diagrams.

Required Skills:

Strong hands-on experience with IBM WebSEAL.

Experience in Keycloak administration and integration.

Good understanding of LDAP concepts and directory services.

Knowledge of SSO, MFA, RBAC, IAM, OAuth 2.0, OpenID Connect, and SAML.

Experience with Linux environments and shell scripting.

Understanding of SSL/TLS certificates and network security concepts.

Experience in troubleshooting authentication and access management issues.

Familiarity with REST APIs and application integration.

Understanding of identity lifecycle management and access governance.

Strong troubleshooting, analytical, and problem-solving skills.

Preferred Qualifications

Bachelor's degree in Computer Science, Information Technology, or related field.

3+ years of experience in IAM or security domain.

Exposure to cloud platforms and DevOps tools is an added advantage.

Certifications in IAM, security, or Keycloak/IBM security products are preferred.