Senior ISAM Developer - Webseal, Java , Cloud

Toronto, ON, Canada

Apply on astra-north.zohorecruit.ca About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Jun 2, 2026

Original job description

Must-Have:

Strong experience implementing and supporting IBM Security Access Manager (ISAM), including:
WebSEAL configuration, junctions, ACLs, protected object space (POS)
Authentication/authorization policies, session and cookie management
Federation using SAML, OIDC, OAuth2
Mapping rules / policy scripting (often JavaScript-based in federation flows)
Solid Java development experience, preferably with:
Spring / Spring Boot, REST APIs, microservices concepts
Authentication and authorization patterns in distributed systems
Strong understanding of IAM fundamentals:
SSO, MFA concepts, token-based auth, identity lifecycle basics
Experience with Linux/Unix, troubleshooting, logs, and network fundamentals (HTTP/S, TLS, headers, cookies).
Srong communication skills and ability to work across security, infrastructure, and application teams.

Nice-to-Have:

Experience with IBM Security Verify Access (ISVA) (newer branding/evolution of ISAM)
Experience with IBM Security Directory Server / LDAP tuning and troubleshooting
Exposure to API gateways, WAF, reverse proxy patterns, and mTLS
Containerization/Cloud knowledge: OpenShift/Kubernetes, Azure/AWS/GCP
CI/CD tools: Jenkins/GitHub Actions/Azure DevOps, SonarQube, Nexus/Artifactory
Banking/financial services domain experience and security/compliance familiarity (e.g., SOC2, PCI, PIPEDA).

Apply on astra-north.zohorecruit.ca About employer

More about this job

Responsibilities

The Senior ISAM Developer at Astra North Infoteck will configure and support IBM ISAM, including WebSEAL junctions, access rules and federation flows. They will also build and troubleshoot Java services and work with other teams on secure access.

Requirements

Candidates need strong hands-on experience with IBM ISAM and WebSEAL, solid Java development skills, and a working knowledge of identity and access management. Linux, network troubleshooting and clear communication across teams are also required.

Skills

IBM Security Access Manager (ISAM)
WebSEAL
Junctions
ACLs
Protected object space (POS)
Authentication and authorization policies
Session and cookie management
SAML
OIDC
OAuth2
Mapping rules
JavaScript
Java
Spring
Spring Boot
REST APIs
Microservices
Single sign-on (SSO)
Multi-factor authentication (MFA)
Token-based authentication
Identity lifecycle management
Linux
Unix
HTTP/S
TLS

Keywords

IBM Security Access Manager
ISAM
WebSEAL
IBM Security Verify Access
ISVA
SAML
OIDC
OAuth2
Java
Spring Boot
REST API
Microservices
SSO
MFA
IAM
LDAP
IBM Security Directory Server
Linux
Unix
TLS

Seniority

Senior

Tools

IBM Security Access Manager
WebSEAL
Spring Boot
Linux
Unix
IBM Security Directory Server
OpenShift
Kubernetes
Jenkins
SonarQube

Languages

English

Report this job