IBM Verify Identity Access Engineer

IBM Verify Identity Access Platform Ownership

• Architect, deploy, upgrade, and operate IBM Verify Identity Access implementations and supporting components (IBM Verify Directory) across Virtual Appliance, Kubernetes, AWS, and Azure environments.
• Design and maintain Active-Active (CRDB), Active-Passive, multi-region high-availability topologies.
• Define and enforce sizing, capacity planning, persistence (AOF/RDB), eviction, and memory optimization strategies for mission-critical workloads.
• Manage IBM Verify Identity Access Operator and related components Operators on Kubernetes, including CRDs, REC/REDB resources, rolling upgrades, and version lifecycle management.
• Perform performance tuning, latency analysis, and benchmarking to meet SLOs.
• Implement backup, restore, disaster recovery (DR), and business continuity (BCP) procedures with documented RTO/RPO targets.

Multi-Cloud Infrastructure & Kubernetes

• Build and maintain cloud infrastructure on AWS (VPC, EKS, IAM, KMS, Route53, PrivateLink) and Azure (AKS, VNet, Private Link, Key Vault, Entra ID).
• Operate Kubernetes clusters: networking (CNI), ingress, service mesh, storage classes, PV/PVC, node pools, autoscaling, and pod security.
• Manage container images, Helm charts, Kustomize overlays, and GitOps workflows (Argo CD/Flux) for IBM Verify Identity Access and supporting services.
• Ensure cross-cloud connectivity, DNS, certificate management (cert-manager), and secret management (Vault, AWS Secrets Manager, Azure Key Vault).

Infrastructure as Code & Automation

Required -

• Develop, review, and maintain automation modules for reproducible, environment-agnostic
• provisioning across multiple deployment options (Kubernetes/OpenShift, AWS, Azure, etc.).
• Automate routine operations using Ansible, Python, Bash, or Go to eliminate manual toil.
• Maintain golden pipelines and reusable templates for infrastructure delivery.

Preferred –

Enforce IaC standards: module versioning, remote state, state locking, drift detection, and policy-as-code (OPA).

GitLab CI/CD & DevSecOps

• Design, build, and optimize GitLab CI/CD pipelines for infrastructure, configuration, and IBM Verify Identity Access platform deployments.
• Implement multi-stage pipelines with linting, security scanning (SAST, IaC scanning, dependency scanning, secret detection), approvals, and progressive delivery.
• Manage GitLab runners (Kubernetes/Docker executors), CI variables, environments, protected branches, and deployment gates.
• Integrate automated testing, policy enforcement, and compliance checks into pipelines.
• Promote GitOps and trunk-based development practices across the team.

Observability, Reliability & Performance

• Implement end-to-end observability using IBM provided tooling/metrics and/or Prometheus, Grafana, OpenTelemetry, ELK/Loki, and APM tools (Dynatrace).
• Define SLIs, SLOs, and error budgets for IBM Verify Identity Access services.
• Conduct capacity forecasting, load testing, and chaos engineering exercises to validate resilience.
• Drive continuous improvement of MTTD and MTTR through automation and runbooks. Incident & Problem Management
• Participate in 24x7 on-call rotation; lead response for Sev-1/Sev-2 incidents impacting IBM Verify Identity Access or dependent services (eg IBM Verify Directory).
• Drive incident command, communication, mitigation, and recovery in line with ITIL incident management practices.
• Maintain and continuously improve runbooks, playbooks, and on-call documentation.

Change & Release Management

• Plan and execute changes following ITIL change management: RFCs, CAB reviews, risk assessment, rollback plans, and maintenance windows.
• Coordinate cross-team release activities and communicate impact to stakeholders.
• Maintain accurate CMDB entries, configuration baselines, and dependency mappings for IBM Verify Identity Access assets and related supporting components.

Security, Compliance & Governance

• Implement security best practices: TLS in-transit, encryption at rest, RBAC/ACLs, network policies, private endpoints, and least-privilege IAM.
• Manage secrets rotation, certificate lifecycle, vulnerability remediation, and patching SLAs.
• Support audits and compliance frameworks (SOC 2, ISO 27001, PCI-DSS, HIPAA, GDPR) with evidence and controls.
• Partner with security teams on threat modeling, hardening, and zero-trust initiatives.

Collaboration, & Documentation

• Partner with application, data, SRE, security, and platform teams to onboard workloads onto IBM Verify Identity Access implementations with best-practice patterns.
• Conduct code/IaC reviews and architecture reviews.
• Produce high-quality technical documentation, ADRs, HLD/LLD diagrams, and knowledge base articles.
• Contribute to platform roadmap, backlog grooming, and quarterly planning.

Continuous Improvement Innovation

• Evaluate new IBM Verify Identity Access features, modules, and emerging technologies as they become available in newer versions of the product suite.
• Drive automation-first culture to reduce manual operations and improve developer self-service.
• Identify and execute reliability, scalability, and performance improvement initiatives.