Senior IAM Engineer (LDAP)

Commerz Global Service Solutions; Selangor; Hybrid; MYR 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid working arrangement

21 days annual leave

Medical benefits

Insurance coverage

Public holiday in lieu

Flexible spending account

Career development

Job summary

Commerzbank AG in Malaysia seeks an LDAP environment engineer to design, implement, and operate LDAP platforms supporting Linux and Solaris endpoints. You will automate tasks, manage replication, and maintain security controls across multi-OS environments.

The role requires deep LDAP expertise, OS side administration experience on RHEL/Solaris, and comfort with SSO/Kerberos. You will collaborate with global teams and participate in modernization of directory services.

Qualifications

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert replication concepts: master‑slave, high availability, disaster recovery
• Oracle Unified Directory knowledge with OCP level expected
• Kerberos, SSO, secure authentication know‑how
• Python, Perl, shell scripting; Solaris and RHEL packaging/release management
• Software Development lifecycle familiarity, testing, version control, releases
• Ansible knowledge is a plus
• Unix permissions and RBAC with Identity and Access Management concepts
• OS side administration on Red Hat Enterprise Linux and Oracle Solaris
• Security topics such as SIEM, security patching, PAM

Responsibilities

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure
• Implement authentication and authorization via LDAP
• Configure TLS/SSL and certificates for secure LDAP
• Define and maintain ACLs and security policies
• Ensure compliance with internal security standards and regulatory requirements
• Integrate applications and services with LDAP for user/group management
• Support SSO, IAM, and federation solutions relying on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance to IT teams and stakeholders
• Develop scripts/tools to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and procedures
• Participate in projects to modernize or migrate directory services

Skills

LDAP knowledge

RHEL & Solaris admin

Python/Shell scripting

Kerberos & SSO

On-call support

Education

Oracle Unified Directory / OCP

Tools

LDIF tooling

LDAP tooling

Job description

Commerzbank AG is the second largest German bank employing more than 50 000 people. In our Digital Technology Center located in Petaling Jaya, Selangor, Malaysia, we employ more than 300 employees from multiple countries in an agile environment. Our IT division is successful in providing a wide range of quality IT solutions and we are expecting further growth by providing new services and projects to help creating the future of digitalization.

We are looking for an Lightweight Directory Access Protocol ( Oralce LDAP) environment engineer.

You have LDAP and Oralce LDAP Server knowledge. You are also expected to have experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris.

Work Arrangement

EMEA Hours 08:00 – 17:00 (UTC +01:00) or Malaysian Hours from 3:00PM - 12:00AM.

You may need to support on-call and out of hours support.

Key Activities

1. Operations & Administration

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure

2. Security & Access Management

• Implement and manage authentication and authorization via LDAP
• Configure secure communication (TLS/SSL, certificates) for LDAP connections
• Define and maintain access control lists (ACLs) and security policies
• Ensure compliance with internal security standards and regulatory requirements

3. Integration & Support

• Integrate applications and services with LDAP for user and group management (e.g. Linux/Unix systems, web applications, IAM solutions)
• Support SSO, IAM, and federation solutions that rely on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance and support to other IT teams and stakeholders

4. Automation, Optimization & Documentation

• Develop scripts and tools (e.g. shell, Python) to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and operational procedures
• Participate in projects to modernize, consolidate, or migrate directory services

Skills Requirements

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert knowledge of LDAP master‑slave replication, high availability and disaster recovery concepts
• Good knowledge in Oracle Unified Directory. Oracle Certified Professional (OCP) knowledge level expected
• Expert knowledge of Kerberos, Single‑Sign‑On, secure authentication methods
• Familiarity with Python, Perl, shell programming, Solaris and RHEL packaging, release management
• Familiarity with Software Development lifecycle, testing concepts, version control systems, and release management
• Knowledge of Ansible Automation Platform is a plus
• Expert knowledge of Unix permissions, Role Based Access Control as well as general Identity and Access Management concepts
• Experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris
• Security topics (SIEM, Security Patching, PAM)

What we offer

• Hybrid working arrangement
• 21 days Annual Leave (Prorated)
• Medical Benefits for Employee, Spouse & Child
• Insurance Coverage
• Public Holiday in Lieu
• Flexible Spending Account
• EPF contribution rates will be increased after complete 3, 6, 10, and 14 years of service.
• A key role in shaping bank‑wide capacity management in a global organization
• Exposure to international stakeholders across Asia, Europe and America
• Office reachable by public transport
• Opportunities to drive conceptual work, influence strategy and work with modern tooling
• Professional development in a global banking group with strong focus on risk management and compliance