IAM Production Support Engineer (SSO)

Sopra Steria; Singapore; Hybrid; SGD 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Health insurance

Annual bonus

Training opportunities

Team events

Job summary

Sopra Steria is seeking an IAM Production Support L2 Engineer (SSO) to support a major investment bank. The role focuses on production support for SSO/Identity Management platforms, involving incident handling, platform maintenance, and collaboration with cross‑functional teams across regions.

Flexibility for on‑call and after‑hours work is required. The ideal candidate will have hands-on experience with SSO tools, IAM provisioning, and automation, along with strong problem-solving and

Qualifications

• Technical Skills essential for the role include, but not limited to: SSO platforms like CA SiteMinder Web SSO, LDAP, and various web servers.
• Experience with autoprovisioning tools (BMC ControlSA, Sailpoint, or Forgerock).
• Familiarity with SSO architectures, tokens and certificates, and IAM best practices.
• Proficiency with scripting (Python or shell) and automation (Ansible).
• Experience in incident, change, and problem management within ITIL environments.

Responsibilities

• Provide production support for SSO and IDM platforms, working with development and infrastructure teams.
• Monitor and improve availability and performance of production environments.
• Manage capacity and performance of production applications.
• Lead incident response and problem remediation with cross-team collaboration.
• Follow change management processes for production deployments.

Skills

SSO

RSA encryption

OAuth2/OpenID Connect

LDAP

Tomcat/Apache/nginx

SAML/WS-Security

Ansible

Python/shell scripting

ITIL knowledge

Problem solving

Communication

Tools

BMC ControlSA

Sailpoint

Forgerock

Jira

ServiceNow

Job description

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.
In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.

For this position, we are looking for IAM Production Support L2 Engineer (SSO) to assist one of our key clients – a leading global investment bank.

Job Description

You will be part of the SSO team, which provide identity and access management tooling as a middleware delivery team. The work on authentication and authorisation for both internal and external customers. Using several standardised frameworks, the team maintains and governs access policies and works to deliver technologies to ensure that the right entities have the appropriate access to technology resources.

You will be part of multi-geographical (presence in 3 regions and 6 locations) and multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics:

• Project Delivery
• Platform Support and Maintenance
• Incident and Problem Management
• Change Management
• General

The candidate will also be well versed with cryptographic notions such as RSA, symmetric and asymmetric, encryption, certificates and digital signatures etc

Responsibilities:

The jobholder will be part of a multi-disciplined team, providing support and enhancement for the SSO and Identity Management platforms. The role is focused on production support, and requires a wide range of technical skills. The Production Engineer will work closely and in partnership with development and infrastructure.

Platform Support and Maintenance

• Pro-actively monitor, manage and improve availability and performance of the production environments (from presentation and application layers to Infrastructure layers)
• Pro-actively manage the capacity of production applications
• Provide feedback and propose solutions to management on performance, capacity and design issues

Incident and Problem Management

• To work with partner teams to conduct analysis of major and critical incidents.
• To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and IDM area.

Change Management

• To work within the change management framework adopted and to ensure that all changes to the production environment are planned and executed in a controlled manner.
• To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.
• Change preparation and deployment following standard application deployment tools and methodology

The Production Engineer will also work with other teams to respond to incidents and resolve issues promptly, often under pressure, to restore normal services to the business. Therefore, ability to be on call and provide support out of hours is essential.

As this is a production support role, focusing across a range of different and evolving technologies, candidates must possess the aptitude and desire to learn.

General

• Perform pre-assigned tasks to accomplish the function responsible for.
• Work cooperatively with the other members of the team
• Ensure adherence to processes and procedures
• Request improvement of knowledge (training) when needed
• Apply own initiative, within the levels of acceptable risk
• Whenever in doubt, elevate and seek advice and guidance
• If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied
• Escalate risks / issues to the manager of the team
• Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.
• Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
• Provide a direct contribution to the operational permanent control framework.

Qualifications

Requirements:

Technical Skills essential for the role include, but not limited to:

• CA Siteminder Web SSO
• Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock
• LDAP
• Application Server: Good exposure in configuring and supporting web technologies such as Tomcat, Apache,
• nginx, IIS
• SOA security - SAML / WS-Security
• IIS/WCF/WIF, WAS security models
• Infrastructure standards for network load balancers, servers, networks and storage
• Automation mind-set with experience in using tools like Ansible
• Scripting skills using Python or shell
• Proven logical and methodical problem analysis and troubleshooting skills
• Working with an industry recognised service desk and project management toolset
• Clear communicator in both written and oral forms
• oAuth2, OpenIDConnect
• Authentication services for APIs
• Exposure to Apigee API gateway
• Knowledge of Process & Quality management, ITIL v2/v3
• Microsoft Project, Advanced Excel, PowerPoint and Word
• Knowledge of Atlasian Jira Task Management toolset
• Previously used ServiceNow as a Service Desk Management product

Additional Information

• Work-life balance: Hybrid working mode and Work-from-Abroad benefits, 18 days of Annual leave
• Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
• Performance incentives: Annual bonus based on individual performance
• Learning & development: Training programs, certification opportunities, and training incentives to support career growth
• Team culture: Regular team-building activities and social events