IAM Engineer

Singapore, Central Singapore, Singapore

Full Time Mid-level / Intermediate SGD 87K - 163K *

Sopra Steria

Sopra Steria, a European Tech leader recognised for its consulting, digital services and software development, helps its clients drive their digital transformation to obtain tangible and sustainable benefits.

View all jobs at Sopra Steria

Apply now Apply later

Posted 3 hours ago

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 60,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria I2S APAC, in charge of Infrastructure, Cloud and Cybersecurity services.

Descriptions:

We are seeking a L3 Senior Engineer specializing in Identity Access Management (IAM) to support one of our clients, a leading global investment bank.

The Single-Sign-On (SSO) team provide identity and access management tooling as a middleware delivery team, supporting authentication and authorisation for both internal and external customers.

Using several standardised frameworks, the team maintains and governs access policies and works to deliver technologies to ensure that the right entities have the appropriate access to technology resources.

The jobholder will be part of multi-geographical (presence in 3 regions and 6 locations) and multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics:

Architecture
Project Delivery
Platform Support and Maintenance
Incident and Problem Management
Change Management
General

The candidate will also be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Responsibilities:

Architecture:

To provide architectural expertise thereby driving change and improvement in technology and process.
To contribute to the development of the SSO and LDAP technology roadmaps.
To liaise with CIB architecture teams in undertaking architectural reviews.
To stay abreast of emerging technologies and technology trends.
To automatize the process to accelerate the delivery time

Project Delivery:

To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.
To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.
To liaise with the Application Developers in low-level diagnosis of on-going issues.
To provide subject matter expertise on SSO and IDM technologies to all business application teams.
To act as technology evangelists for the improvement of process and technology in use for the Authentication services.

Platform Support and Maintenance:

Pro-actively monitor, manage and improve availability and performance of the production environments (from presentation and application layers to Infrastructure layers)
Pro-actively manage the capacity of production applications

Incident and Problem Management:

To work with partner teams to conduct analysis of major and critical incidents.
To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and LDAP area.

Change Management:

To work within the change management framework adopted by BNP Paribas to ensure that all changes to the production environment are planned and executed in a controlled manner.
To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.
Attending and sharing knowledge / updates in the Weekly Change Control Board Meetings and the Weekly Problem Management Meetings.

General:

Perform pre-assigned tasks to accomplish the function responsible for
Work cooperatively with the other members of the team
Ensure adherence to processes and procedures
Request improvement of knowledge (training) when needed
Apply own initiative, within the levels of acceptable risk
Whenever in doubt, escalate and seek advice and guidance
If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied
Escalate risks / issues to the manager of the team
Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.
Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
Provide a direct contribution to the operational permanent control framework.

As this is a production support role, focusing across a range of different and mostly innovative technologies, candidates must possess the aptitude and desire to learn. In addition, ability to be on call and provide support out of hours is essential.

Requirements

Technical Skills essential for the role include, but not limited to:

CA Siteminder Web SSO
SOA security - SAML / WS-Security
Autoprovisioning tools such as BMC ControlSA, Sailpoint, or Forgerock
LDAP
Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO
oAuth2, OpenIDConnect
IIS/WCF/WIF, WAS security models
Infrastructure standards for network load balancers, servers, networks and storage
Automation mind-set with experience in using tools like Ansible
Scripting skills using Python/JS or shell
Application Server: Good exposure in configuring and supporting web technologies such as Tomcat, Apache, nginx, IIS
Proven logical and methodical problem analysis and troubleshooting skills
Working with an industry recognised service desk and project management toolset
Clear communicator in both written and oral forms