JobCubby JobCubby
Sign up
Yum!

Sr. Security Engineer I

Yum! Gurgaon, Haryana, India

Restaurants · 10,001+ employees

Aug 06
security Principal (10+ yrs) Full-time India
Log in to apply, save this posting, or score it against your profile with AI.

About the role

The engineer will implement, configure, and upgrade IAM environments while managing identity lifecycles and JML processes. They will also provide operational support, troubleshoot issues, and develop custom workflows and extensions for enterprise applications.

What they look for

IBM ISIM IBM ISAM SailPoint IIQ Identity and Access Management Java J2EE BeanShell JavaScript Python LDAP Tivoli Directory Integrator SAML OAuth 2.0 OpenID Connect Provisioning API

Requirements

Candidates must have 8-10 years of relevant experience and proficiency in IAM products like IBM ISIM, ISAM, or SailPoint IIQ. Strong technical skills in Java, scripting, LDAP, and authentication protocols are required, along with a bachelor's degree.

Full description

Responsibilities

Responsibilities:

  • Implementation & Configuration

- Install, configure, and upgrade IBM ISIM, IBM ISAM, and SailPoint IIQ environments. - Migrate IAM solutions across environments (Dev, Test, Prod) and between platforms.

  • Customization & Extensions

- Develop custom workflows, provisioning policies, and role-based access models. - Write extensions, connectors, and adapters for application onboarding. - Customize IAM products to align with enterprise security and compliance needs.

  • Identity Lifecycle Management

- Design and implement Joiner/Mover/Leaver (JML) processes. - Configure automated provisioning/de-provisioning policies. - Build rules for access reviews, role mining, and access certifications (where applicable).

  • Integration & Directory Services

- Integrate enterprise applications, directories, and databases with IAM platforms. - Configure LDAP directory services, replication, and schema extensions. - Write and maintain Tivoli Directory Integrator (TDI) scripts for data synchronization.

  • Access Management (if ISAM included)

- Configure authentication/authorization policies, SSO, and federation (SAML, OAuth, OIDC). - Develop custom login modules and risk-based access rules.

  • Troubleshooting & Support

- Diagnose and resolve issues related to provisioning, authentication, and directory replication. - Provide operational support and optimize IAM processes.

  • Hands-on experience in at least two IAM products (ISIM, ISAM, SailPoint IIQ).
  • Expertise in workflow development, policy configuration, and application integration.
  • Proficiency in Java/J2EE, BeanShell, JavaScript, or Python for writing extensions and rules.
  • Experience with LDAP (TDS, Active Directory, OpenLDAP) including replication and schema design.
  • Strong knowledge of Tivoli Directory Integrator (TDI) scripting.
  • Understanding of authentication protocols (SAML, OAuth 2.0, OpenID Connect, Kerberos, RADIUS).
  • Familiarity with databases (Oracle, DB2, SQL Server) for IAM backend operations.
  • Good knowledge of provisioning connectors, adapters, and APIs (REST/SOAP).
  • Strong problem-solving and troubleshooting skills in complex IAM environments.

Preferred (but not required):

  • Certification in any of the following: IBM ISIM, IBM ISAM, SailPoint IdentityIQ.
  • Experience in IAM solution design and large-scale deployments.
  • Understanding of compliance requirements (SOX, GDPR, ISO 27001).

Qualifications

BE - BTECH - 8-10 years of relevant experience

Similar roles