IAM Production Support Engineer (SSO)

About the role

Sopra Steria, a European technology group, is hiring an IAM Production Support L2 Engineer (SSO) in Singapore to support a key client, a leading global investment bank. You will join the SSO team, a middleware delivery team that provides identity and access management tooling, covering authentication and authorisation for internal and external customers. The team is multi-geographical (three regions, six locations) and covers architecture, project delivery, platform support, incident and problem management, and change management.

Key responsibilities

• Monitor, manage and improve the availability and performance of production environments, from presentation and application layers down to infrastructure, and manage production application capacity
• Customise production tools such as monitoring, deployment and scheduling, and give feedback and propose solutions on performance, capacity and design issues
• Analyse major and critical incidents with partner teams and suggest improvements to reduce ongoing incidents
• Plan and execute changes within the change management framework, ensuring they are technically sound and deployed with standard tools and methodology
• Respond to incidents and resolve issues promptly, often under pressure, and be available on call and out of hours
• Follow general work practices: cooperate with the team, adhere to processes, request training, escalate risks and issues, and contribute to operational permanent control

Required profile

• Well versed in cryptographic concepts such as RSA, symmetric and asymmetric encryption, certificates and digital signatures
• Logical, methodical problem analysis and troubleshooting skills
• Ability to learn quickly, apply initiative within acceptable risk, and escalate when in doubt
• Clear communicator in writing and orally

Required skills

• CA Siteminder Web SSO and LDAP
• Autoprovisioning tools such as BMC ControlSA, Sailpoint or Forgerock
• Web server configuration (Tomcat, Apache, nginx, IIS) and SOA security (SAML, WS-Security)
• Kerberos, SSL/TLS, PKI, GSS-API, SPNEGO, IIS/WCF/WIF and WAS security models
• Ansible automation and scripting in Python or shell
• Experience with an industry-recognised service desk and project management toolset
• Desirable: OAuth2, OpenID Connect, SQL, database schemas, API authentication, Apigee, ITIL v2/v3, Microsoft Project, Excel, PowerPoint, Word, Jira, ServiceNow

What we offer

• Hybrid working mode and work-from-abroad benefits, 18 days of annual leave
• Comprehensive health and insurance coverage (GP, hospitalization, dental, optical)
• Annual bonus based on individual performance
• Training programs, certification opportunities and training incentives
• Regular team-building activities and social events