SSO / IDM Production Support Engineer (L2)

Summary:

A leading international bank is looking for an L2 Production Engineer to support and enhance its Single Sign-On (SSO) and Identity & Access Management (IAM) platforms. The role covers proactive monitoring, incident and problem management, and change management for production environments, working closely with development and infrastructure teams in a multi-regional setup.

Responsibilities:

• Proactively monitor, manage and improve the availability, performance and capacity of production SSO/IDM environments, from application to infrastructure layers
• Analyse major and critical incidents with partner teams, and propose improvements to reduce recurring incidents
• Plan, prepare and deploy production changes in line with the change management framework, ensuring quality in technical and planning detail
• Customise production tools (monitoring, deployment, scheduling)
• Provide feedback and propose solutions on performance, capacity and design issues
• Respond to incidents under pressure to restore services promptly, including out-of-hours support
• Contribute to operational controls and escalate risks and issues appropriately

Qualifications/Requirements:

Essential:

• Bachelor’s degree in Computer Science or equivalent
• Hands-on experience with CA SiteMinder Web SSO
• Experience with provisioning tools such as BMC ControlSA, SailPoint or ForgeRock
• LDAP
• Configuring and supporting web/application servers (Tomcat, Apache, nginx, IIS)
• SOA security: SAML, WS-Security
• Kerberos, SSL/TLS, PKI, GSS-API, SPNEGO
• Knowledge of IIS/WCF/WIF and WAS security models
• Cryptography fundamentals (RSA, symmetric/asymmetric encryption, certificates, digital signatures)
• Infrastructure knowledge: load balancers, servers, networks, storage
• Automation (e.g. Ansible) and scripting (Python or shell)
• Strong analytical and troubleshooting skills
• Experience with service desk and project management toolsets
• Fluent written and spoken English; clear communicator
• Willingness to work shifts and be on call

Desirable:

• OAuth2, OpenID Connect, API authentication services, Apigee API gateway
• SQL and database schema knowledge
• ITIL v2/v3 (ITIL Foundation certificate preferred)
• ServiceNow, Jira
• French language skills
• Microsoft Project and Office suite