We use cookies for the best user experience on our website, including to personalize content & offerings, to provide social media features and to analyze traffic. By clicking “Accept All Cookies” you agree to our use of cookies. You can also manage your cookies by clicking on the "Cookie Preferences" and selecting the categories you would like to accept. For more information on how we use cookies please visit our Cookie Statement and Privacy Statement
Job Responsibilities :🔹 Core Responsibilities ✅ 1. Application Onboarding (Primary Responsibility) • Design, develop, test, and implement onboarding of: o B2E (Employee applications) o B2B / B2C / B2B2C applications • Integrate applications into ISAM SSO/MFA platforms • Configure federations using: o SAML 2.0 o OpenID Connect (OIDC) • Perform end-to-end onboarding lifecycle including design, build, testing, and go-live ________________________________________ ✅ 2. ISAM / SSO Solution Engineering • Engineer and configure ISAM SSO authentication solutions • Support: o Federation setup with multiple Identity Providers and service providers o Integration with enterprise and external applications • Develop secure authentication flows for applications • Ensure compatibility with enterprise identity architecture ________________________________________ ✅ 3. MFA Engineering & Authentication Design • Design and implement multi-factor authentication (MFA) solutions using ISAM: o OTP-based authentication o Token-based authentication o Certificate-based authentication o Adaptive/Risk-based authentication and device registration • Implement authentication across: o Web applications o VPN / remote access o Internal and external access channels ________________________________________ ✅ 4. Authentication Policy Engineering • Create and configure: o MFA policies o Conditional access policies • Enhance authentication security posture by: o Aligning policies to enterprise standards o Enforcing access controls for applications • Implement policy updates as part of onboarding or new integrations ________________________________________ ✅ 5. Azure AD / Identity Platform Integration (ISAM Context Only) • Perform engineering work related to: o Application onboarding into Azure AD (as part of SSO ecosystem) o MFA enforcement policies o Conditional access configuration • Configure AAD integrations with ISAM-based authentication flows ________________________________________ ✅ 6. Identity Platform Capacity & Enhancement Work • Support capacity-related engineering activities: o Identity platform scaling o Authentication system capacity improvements • Perform design-level enhancements as part of onboarding or transformation initiatives ________________________________________ ✅ 7. Testing & Implementation • Conduct: o Integration testing o Functional/authentication testing o Validation of dependent use cases • Ensure all onboarding implementations meet: o Security requirements o Authentication and Authorization standards before release ________________________________________ 🔹 Explicit Activities Covered Under Fixed Capacity The role must include the following activities: • Application onboarding to SSO/MFA identity platform • Designing and implementing authentication integrations • MFA policy creation • Conditional access policy configuration • Support for Azure AD onboarding and identity integration • Identity platform engineering improvements
Job Summary :The ISAM Engineer will be responsible for engineering-focused activities under fixed capacity scope, primarily involving: • Application onboarding into ISAM-based SSO/MFA platforms • Design and implementation of authentication solutions • Policy configuration and identity integrations This role is NOT operational/BAU, and focuses only on non-standard, project-based engineering work.
Key Responsibilities
NA
Skill Requirements
Skill Requirement :Technical Skills: • IBM Security Access Manager (ISAM) – Mandatory • SSO technologies: SAML, OAuth, OpenID Connect • MFA implementations and authentication frameworks • Identity federation and IdP integration • Azure AD / Entra ID (integration level) • Understanding of authentication flows and security architecture Engineering Skills: • Application onboarding design and execution • Identity solution architecture exposure • Troubleshooting complex integration issues (L3-level engineering) • Ability to design secure authentication workflows ________________________________________ 🔹 Deliverables (Measurable Outputs) • Successful onboarding of applications into ISAM SSO/MFA platform • Configured and tested authentication integrations • MFA policies and conditional access implementations • Secure authentication architecture for onboarded apps • Tested and production-ready identity integrations
At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.
HCLTech is a global technology company, home to more than 230,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion.
Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies
Provider
Description
Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:
"route" is used for session stickiness
"careerSiteCompanyId" is used to send the request to the correct data center
"JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
"Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another
Functional Cookies
These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies.
Functional Cookies
Provider
Description
Enabled
Vimeo
Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions
YouTube
YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions
Advertising Cookies
These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.
Google Tag Manager is a tag management system for conversion tracking, site analytics, remarketing, and more. Privacy Policy Terms and Conditions
LinkedIn
LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn. Cookie Policy Cookie Table Privacy Policy Terms and Conditions