IBM Security Access Manager (ISAM)

About the role

ILS Inc. is seeking an experienced Middleware Engineer with strong expertise in IBM Security Access Manager (ISAM) and Application Server administration to support a secure, enterprise-level federal environment. This is a hybrid role requiring on-site presence two days per week at the Fairfax, VA headquarters; candidates must be local to the DC metro area.

Responsibilities

• Install, configure, and manage IBM ISAM (WebSEAL and AAC modules) for access control, SSO, and authentication policies.
• Administer and maintain middleware platforms such as IBM WebSphere, Apache Tomcat, JBoss, or WebLogic.
• Support application deployments and troubleshoot middleware-related issues across development, test, and production environments.
• Integrate ISAM with identity providers, LDAP/AD, and federated SSO using SAML or OIDC.
• Tune middleware infrastructure for high performance and availability.
• Implement and maintain SSL certificates, keystores, truststores, and secure communication.
• Collaborate with application developers, security teams, and network engineers to ensure end-to-end secure integration.
• Create and maintain detailed configuration and operations documentation.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience with middleware systems and identity/access management tools.
• Hands-on experience with IBM Security Access Manager (ISAM) including WebSEAL configuration and policy management.
• Strong knowledge of application server administration (e.g., IBM WebSphere, Tomcat, JBoss, WebLogic).
• Experience integrating with LDAP directories, federated identity systems (SAML, OIDC), and SSL/TLS configurations.

Skills

• Familiarity with scripting (e.g., Shell, Python) for automation of administrative tasks.
• Understanding of networking, firewalls, load balancing, and web infrastructure concepts.
• Familiarity with AWS, Docker, or containerized middleware deployments.
• Knowledge of DevOps tools and infrastructure as code (e.g., Ansible, Terraform).
• Government security standards (e.g., FISMA, NIST, FedRAMP) compliance experience.
• Middleware log analysis tools (e.g., Splunk, ELK stack).