SENIOR IAM ENGINEER

IBM Verify Migration (PingFederate & Duo)

Engagement Overview

We are seeking a Senior Identity and Access Management (IAM) Engineer for a contract engagement supporting a strategic IAM product consolidation initiative, migrating identity services from PingFederate and Duo Security to IBM Verify.

This role requires deep, hands-on expertise in IBM Verify as the target IAM platform, along with a strong working background in PingFederate and Duo to support analysis, migration, and transition activities. The ideal candidate will serve as a technical SME, owning IBM Verify configuration while leveraging Ping and Duo knowledge to ensure a smooth and secure migration.

Key Responsibilities

Serve as the primary technical SME for IBM Verify, leading platform configuration, integration, and optimization.
Analyze existing PingFederate and Duo configurations to support migration planning into IBM Verify.
Lead and execute the migration of SSO, MFA, and access policies from PingFederate and Duo into IBM Verify.
Configure and manage IBM Verify capabilities, including:
- Application onboarding and federation configuration
- Authentication and access policy design
- MFA enrollment, enforcement, and adaptive authentication flows
Support the migration of enterprise applications to IBM Verify, including:
- SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) integrations
- Configuration, testing, validation, and troubleshooting
- Cutover support and post-migration stabilization
Troubleshoot complex authentication, federation, and MFA issues across PingFederate, Duo, and IBM Verifyduring transition phases.
Collaborate with security, infrastructure, and application teams to ensure alignment with enterprise security standards and IBM Verify best practices.
Produce and maintain technical documentation, including migration runbooks, configuration details, and operational handover materials.

Required Skills & Experience

Extensive hands-on experience with IBM Verify as a primary IAM platform (required).
Strong working experience with PingFederate and Duo Security, particularly in SSO and MFA use cases.
Deep expertise in:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Identity and access lifecycle management
Strong understanding of IAM protocols and standards, including:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
Proven experience delivering IAM migrations or platform consolidation initiatives in enterprise environments.
Ability to work independently and take ownership in a contract-based, project-driven role.

Preferred Qualifications

Prior experience serving as an IBM Verify SME during Ping/Duo migration initiatives
Familiarity with IBM Verify Access and Verify SaaS deployments
Experience supporting large, complex application portfolios
Strong communication and stakeholder engagement skills

Airitos, LLC.

Airitos, LLC.

Airitos, LLC.