SAM Developer

Role: SAM Developer Location: Toronto, ON - Hybrid (4 Days WFO) Duration: 12 months of contract Job Overview We are seeking an experienced Senior IBM Security Access Manager (ISAM/ISVA) Developer to join a leading enterprise Identity and Access Management (IAM) team. The ideal candidate will possess deep expertise in IBM Security Access Manager (ISAM) / IBM Security Verify Access (ISVA), strong Java development skills, and hands-on experience implementing secure authentication, authorization, and federation solutions in large-scale enterprise environments. This role requires close collaboration with security, infrastructure, networking, and application development teams to design, develop, and support access management solutions that enable secure user access across enterprise applications. Must-Have: • Strong experience implementing and supporting IBM Security Access Manager (ISAM), including: o WebSEAL configuration, junctions, ACLs, protected object space (POS) o Authentication/authorization policies, session and cookie management o Federation using SAML, OIDC, OAuth2 o Mapping rules / policy scripting (often JavaScript-based in federation flows) • Solid Java development experience, preferably with: o Spring / Spring Boot, REST APIs, microservices concepts o Authentication and authorization patterns in distributed systems • Strong understanding of IAM fundamentals: o SSO, MFA concepts, token-based auth, identity lifecycle basics • Experience with Linux/Unix, troubleshooting, logs, and network fundamentals (HTTP/S, TLS, headers, cookies). • Strong communication skills and ability to work across security, infrastructure, and application teams. Nice-to-Have: • Experience with IBM Security Verify Access (ISVA) (newer branding/evolution of ISAM) • Experience with IBM Security Directory Server / LDAP tuning and troubleshooting • Exposure to API gateways, WAF, reverse proxy patterns, and mTLS • Containerization/Cloud knowledge: OpenShift/Kubernetes, Azure/AWS/GCP • CI/CD tools: Jenkins/GitHub Actions/Azure DevOps, SonarQube, Nexus/Artifactory • Banking/financial services domain experience and security/compliance familiarity (e.g., SOC2, PCI, PIPEDA).

Design, develop, and support secure authentication and authorization solutions using IBM ISAM/ISVA. Collaborate with security and infrastructure teams to enable secure user access across enterprise applications.

Requires deep expertise in IBM Security Access Manager, strong Java development skills, and experience with federation protocols like SAML and OAuth2. Proficiency in Linux and IAM fundamentals is essential.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• IBM Security Access Manager
• IBM Security Verify Access
• Java
• Spring Boot
• SAML
• OIDC
• OAuth2
• WebSEAL
• Identity and Access Management
• REST APIs
• Linux
• LDAP
• Microservices
• SSO
• MFA
• JavaScript

• Software
• Technology
• Security & Safety
• Finance & Accounting
• Consulting

Expérience minimale

5+ ans

Postuler avant le

22 août 2026

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Présence au bureau

4 jours par semaine

Niveau d’expérience

Mid-Senior level

Mode de candidature

La candidature directe est offerte