Job Summary

Job Responsibilities : Core Responsibilities ✅ 1. Application Onboarding (Primary Responsibility) • Design, develop, test, and implement onboarding of: o B2E (Employee applications) o B2B / B2C / B2B2C applications • Integrate applications into ISAM SSO/MFA platforms • Configure federations using: o SAML 2.0 o OpenID Connect (OIDC) • Perform end-to-end onboarding lifecycle including design, build, testing, and go-live ________________________________________ ✅ 2. ISAM / SSO Solution Engineering • Engineer and configure ISAM SSO authentication solutions • Support: o Federation setup with multiple Identity Providers and service providers o Integration with enterprise and external applications • Develop secure authentication flows for applications • Ensure compatibility with enterprise identity architecture ________________________________________ ✅ 3. MFA Engineering & Authentication Design • Design and implement multi-factor authentication (MFA) solutions using ISAM: o OTP-based authentication o Token-based authentication o Certificate-based authentication o Adaptive/Risk-based authentication and device registration • Implement authentication across: o Web applications o VPN / remote access o Internal and external access channels ________________________________________ ✅ 4. Authentication Policy Engineering • Create and configure: o MFA policies o Conditional access policies • Enhance authentication security posture by: o Aligning policies to enterprise standards o Enforcing access controls for applications • Implement policy updates as part of onboarding or new integrations ________________________________________ ✅ 5.



Azure AD / Identity Platform Integration (ISAM Context Only) • Perform engineering work related to: o Application onboarding into Azure AD (as part of SSO ecosystem) o MFA enforcement policies o Conditional access configuration • Configure AAD integrations with ISAM-based authentication flows ________________________________________ ✅ 6. Identity Platform Capacity & Enhancement Work • Support capacity-related engineering activities: o Identity platform scaling o Authentication system capacity improvements • Perform design-level enhancements as part of onboarding or transformation initiatives ________________________________________ ✅ 7. Testing & Implementation • Conduct: o Integration testing o Functional/authentication testing o Validation of dependent use cases • Ensure all onboarding implementations meet: o Security requirements o Authentication and Authorization standards before release ________________________________________ Explicit Activities Covered Under Fixed Capacity The role must include the following activities:



• Application onboarding to SSO/MFA identity platform • Designing and implementing authentication integrations • MFA policy creation • Conditional access policy configuration • Support for Azure AD onboarding and identity integration • Identity platform engineering improvements

Job Summary : The ISAM Engineer will be responsible for engineering-focused activities under fixed capacity scope, primarily involving: • Application onboarding into ISAM-based SSO/MFA platforms • Design and implementation of authentication solutions • Policy configuration and identity integrations This role is NOT operational/BAU, and focuses only on non-standard, project-based engineering work.

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Technical Skills: • IBM Security Access Manager (ISAM) – Mandatory • SSO technologies: SAML, OAuth, OpenID Connect • MFA implementations and authentication frameworks • Identity federation and IdP integration • Azure AD / Entra ID (integration level) • Understanding of authentication flows and security architecture Engineering Skills: • Application onboarding design and execution • Identity solution architecture exposure • Troubleshooting complex integration issues (L3-level engineering) • Ability to design secure authentication workflows ________________________________________ Deliverables (Measurable Outputs) • Successful onboarding of applications into ISAM SSO/MFA platform • Configured and tested authentication integrations • MFA policies and conditional access implementations • Secure authentication architecture for onboarded apps • Tested and production-ready identity integrations

Must Have Skill

IAM Service Delivery

Valuable to Have Skill

Other Requirements

NA

📌 Track Lead - IAM Service Delivery (Canada)
🏢 HCL CANADA INC. (Fy HCL Axon Technologies
📍 Canada