LDAP Engineer

Commerz Global Service Solutions; Petaling Jaya; Hybrid; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid working arrangement

21 days Annual Leave (Prorated)

Medical Benefits for Employee, Spouse,

Insurance Coverage

Public Holiday in Lieu

Flexible Spending Account

Exposure to international stakeholders

Job summary

Commerz Global Service Solutions is seeking an experienced LDAP/Identity & Access Management engineer in Malaysia. You will install, configure, and maintain LDAP infrastructure, ensuring secure authentication and seamless SSO across systems.

You will support hybrid working arrangements, implement replication, DR, and optimize performance with automation, while collaborating with global stakeholders in a banking group environment.

Qualifications

• Expert LDAP knowledge including LDIF, hierarchy, and schema management.
• Expert replication, high availability, and disaster recovery concepts for LDAP.
• Familiarity with Oracle Unified Directory and OCP level knowledge expected.
• Expert Kerberos, SSO, and secure authentication methods.
• Knowledge of Unix permissions and RBAC in IAM contexts.

Responsibilities

• Install, configure, and maintain LDAP servers and related components.
• Manage entries, groups, OUs, and directory structure; ensure backups and DR.
• Support SSO/IAM integrations and troubleshoot directory issues for teams.
• Develop automation scripts to optimize LDAP operations and reporting.

Skills

LDAP knowledge

LDIF and LDAP schema management

LDAP master-slave replication

High availability and disasterRecovery

Oracle Unified Directory

OCP knowledge

Kerberos and SSO

RBAC and IAM concepts

Unix permissions

Red Hat Enterprise Linux

Oracle Solaris

Python/Perl/shell scripting

Ansible Automation Platform

Security & compliance

Education

Oracle Certified Professional (OCP)

Tools

Ansible

Python

Perl

Shell scripting

Job description

EMEA Hours 08:00 – 17:00 (UTC +01:00) or Malaysian Hours from 3:00PM - 12:00AM.

You may need to support on-call and out of hours support.

Key Activities:

1. Operations & Administration

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure

2. Security & Access Management

• Implement and manage authentication and authorization via LDAP
• Configure secure communication (TLS/SSL, certificates) for LDAP connections
• Define and maintain access control lists (ACLs) and security policies
• Ensure compliance with internal security standards and regulatory requirements

3. Integration & Support

• Integrate applications and services with LDAP for user and group management (e.g. Linux/Unix systems, web applications, IAM solutions)
• Support SSO, IAM, and federation solutions that rely on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance and support to other IT teams and stakeholders

4. Automation, Optimization & Documentation

• Develop scripts and tools (e.g. shell, Python) to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and operational procedures
• Participate in projects to modernize, consolidate, or migrate directory services

Skills Requirements:

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert knowledge of LDAP master-slave replication, high availability and disaster recovery concepts
• Good knowledge in Oracle Unified Directory. Oracle Certified Professional (OCP) knowledge level expected
• Expert knowledge of Kerberos, Single-Sign-On, secure authentication methods
• Familiarity with Python, Perl, shell programming, Solaris and RHEL packaging, release management
• Familiarity with Software Development lifecycle, testing concepts, version control systems, and release management
• Knowledge of Ansible Automation Platform is a plus
• Expert knowledge of Unix permissions, Role Based Access Control as well as general Identity and Access Management concepts
• Experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris
• Security topics (SIEM, Security Patching, PAM)

What we offer:

• Hybrid working arrangement
• 21 days Annual Leave (Prorated)
• Medical Benefits for Employee, Spouse & Child
• Insurance Coverage
• Public Holiday in Lieu
• Flexible Spending Account
• EPF contribution rates will be increased after complete 3, 6, 10, and 14 years of service.
• A key role in shaping bank‑wide capacity management in a global organization
• Exposure to international stakeholders across Asia, Europe and America
• Office reachable by public transport
• Opportunities to drive conceptual work, influence strategy and work with modern tooling
• Professional development in a global banking group with strong focus on risk management and compliance