Senior IAM Engineer: LDAP, SSO & Automation (Hybrid)

Commerz Global Service Solutions; Selangor; Hybrid; MYR 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid working arrangement

21 days annual leave

Medical benefits

Insurance coverage

Public holiday in lieu

Flexible spending account

Career development

Job summary

Commerzbank AG in Malaysia seeks an LDAP environment engineer to design, implement, and operate LDAP platforms supporting Linux and Solaris endpoints. You will automate tasks, manage replication, and maintain security controls across multi-OS environments.

The role requires deep LDAP expertise, OS side administration experience on RHEL/Solaris, and comfort with SSO/Kerberos. You will collaborate with global teams and participate in modernization of directory services.

Qualifications

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert replication concepts: master‑slave, high availability, disaster recovery
• Oracle Unified Directory knowledge with OCP level expected
• Kerberos, SSO, secure authentication know‑how
• Python, Perl, shell scripting; Solaris and RHEL packaging/release management
• Software Development lifecycle familiarity, testing, version control, releases
• Ansible knowledge is a plus
• Unix permissions and RBAC with Identity and Access Management concepts
• OS side administration on Red Hat Enterprise Linux and Oracle Solaris
• Security topics such as SIEM, security patching, PAM

Responsibilities

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure
• Implement authentication and authorization via LDAP
• Configure TLS/SSL and certificates for secure LDAP
• Define and maintain ACLs and security policies
• Ensure compliance with internal security standards and regulatory requirements
• Integrate applications and services with LDAP for user/group management
• Support SSO, IAM, and federation solutions relying on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance to IT teams and stakeholders
• Develop scripts/tools to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and procedures
• Participate in projects to modernize or migrate directory services

Skills

LDAP knowledge

RHEL & Solaris admin

Python/Shell scripting

Kerberos & SSO

On-call support

Education

Oracle Unified Directory / OCP

Tools

LDIF tooling

LDAP tooling

Job description

Commerzbank AG in Malaysia seeks an LDAP environment engineer to design, implement, and operate LDAP platforms supporting Linux and Solaris endpoints. You will automate tasks, manage replication, and maintain security controls across multi-OS environments.

The role requires deep LDAP expertise, OS side administration experience on RHEL/Solaris, and comfort with SSO/Kerberos. You will collaborate with global teams and participate in modernization of directory services.