L2 Production Engineer (SSO / LDAP / SOA / IIS / Ansible / Load Balancing / Python / Shell)

Maltem Asia is currently seeking an L2 Production Support Engineer for our i-Banking Client.

Our Client's APAC Production Security teams manage critical IT security functions for our premier clients across the region, specializing in:

• IT Production Security Governance, PMO & Risks

• Network Security and Security Design & Architecture

• Vulnerability & Compliance Management

• IAM Production

• Production CSIRT, Detection & SIEM Engineering

• Production support of core security platforms

II. Context & Role Summary:

The Production Security domain oversees enterprise security solutions within mission-critical banking and financial environments.

The SSO (Single Sign-On) team functions as a middleware delivery unit providing identity and access management tooling, managing authentication and authorization for both internal and external stakeholders.

Using standardized frameworks, the team maintains and governs access policies to ensure the right entities have appropriate and secure access to technology resources.

As an SSO IDM Production L2 Engineer, you will be part of a multi-geographical (3 regions, 6 locations) and multi-disciplined team providing support and project delivery across the following areas:

• Architecture and Project Delivery

• Platform Support and Maintenance

• Incident, Problem, and Change Management

You will also work closely with cryptographic concepts such as RSA, symmetric/asymmetric encryption, certificates, and digital signatures.

III. Key Accountabilities:

Platform Support and Maintenance:

• Proactively monitor, manage, and improve the availability and performance of production environments (spanning presentation, application, and infrastructure layers).

• Manage production application capacity proactively.

• Customize production tools (monitoring, deployment, scheduling, etc.).

• Provide feedback and propose technical solutions to management regarding performance, capacity, and design challenges.

Incident and Problem Management:

• Partner with cross-functional teams to conduct root-cause analysis for major and critical incidents.

• Identify tactical and strategic improvements to minimize ongoing incidents within the SSO and IDM domain.

Change Management:

• Operate within established change management frameworks to ensure production changes are planned, controlled, and executed cleanly.

• Take ownership of change quality within the SSO/IDM environments, ensuring high technical and planning standards.

• Prepare and deploy changes utilizing standard application deployment tools and methodologies.

• Participate in on-call rotations and provide out-of-hours support to resolve critical incidents and restore normal business services under pressure.

General Responsibilities:

• Adhere to strict internal processes, procedures, and operational risk controls to minimize failure and fraud risks.

• Apply sound initiative within acceptable risk boundaries, escalating risks and issues appropriately to management.

IV. Professional Skills, Abilities & Experience:

Essential Technical Skills:

• SSO & Directory Services: CA Siteminder Web SSO, LDAP.

• Auto-provisioning Tools: Experience with tools such as BMC ControlSA, Sailpoint, or Forgerock.

• Web Technologies & Application Servers: Strong exposure to configuring and supporting Tomcat, Apache, nginx, IIS.

• SOA Security & Protocols: SAML/WS-Security, Kerberos/SSL/TLS/PKI/GSS-API/SPNEGO.

• Security Models: IIS/WCF/WIF, WAS security models.

• Infrastructure & Automation: Understanding of network load balancers, servers, and storage; automation mindset with experience in tools like Ansible.

• Scripting: Proficiency in Python or Shell scripting.

• Core Competencies: Proven logical problem-solving abilities, excellent troubleshooting skills, and clear written/verbal communication.

Desirable Skills:

• OAuth2, OpenIDConnect, and API authentication services.

• SQL and database schema understanding.

• Exposure to the Apigee API gateway.

• Knowledge of ITIL (v2/v3) frameworks and Process & Quality management.

• Familiarity with Atlassian Jira and ServiceNow toolsets.

V. Personal Attributes:

• Strong analytical skills with high attention to detail.

• Structured, methodical, and "can-do" mindset (viewing changes as opportunities to improve).

• Team-oriented with strong interpersonal and communication skills.

• High aptitude and desire to learn evolving cutting-edge technologies.

VI. Languages & Qualifications:

• Languages: High proficiency in spoken and written English (B2/C level); French language skills are a plus.

• Qualifications: Bachelor’s degree in Computer Science or equivalent. ITIL Foundation certification is desirable.

VII. Working Hours & Arrangements:

• On-Site Schedule: Weekly rotating shifts covering standard operational hours (8:00 AM to 7:00 PM, 8 working hours per day).

• On-Call Services: Out-of-hours on-call support covered in weekly team rotations.

• Public Holidays: Rotational coverage required for public holidays (excluding 1 Jan & 25 Dec, operated by a skeleton crew of 2 staff members).