L2 Production Engineer

WE Asia Pte Ltd; Singapore; On-site; SGD 60,000 - 120,000; Full time

Job summary

WE Asia Pte Ltd is seeking a skilled SSO/Identity Management specialist to support and deliver projects across multi-geographical teams. You will handle platform support, incident and change management, and collaborate with partner teams to ensure secure authentication services and policy governance.

Proficiency in SSO solutions, LDAP, API authentication, and various web servers is required. Strong English communication and ITIL knowledge are valued.

Qualifications

• CA Siteminder Web SSO
• Autoprovisioning tools such as BMC ControlSA, Sailpoint, or Forgerock
• LDAP
• Application Server: Tomcat, Apache, nginx, IIS
• SOA security - SAML / WS-Security
• IIS/WCF/WIF, WAS security models
• Infrastructure standards for load balancers, servers, networks and storage
• Automation mindset with Ansible
• Scripting skills using Python or shell
• Proven logical and methodical problem analysis and troubleshooting
• Working with an industry recognised service desk and project management toolset
• Clear communicator in both written and oral forms
• oAuth2, OpenIDConnect
• Authentication services for APIs
• Exposure to Apigee API gateway
• Knowledge of Process & Quality management, ITIL v2/v3
• Microsoft Project, Advanced Excel, PowerPoint and Word
• Knowledge of Atlassian Jira Task Management toolset

Responsibilities

• Platform Support and Maintenance: monitor and improve availability and performance of production environments from presentation to infrastructure layers.
• Proactively manage production application capacity.
• Provide feedback and propose solutions on performance, capacity and design issues.
• Incident and Problem Management: analyze major incidents with partner teams.
• Identify tactical or strategic improvements to reduce ongoing incidents in SSO/IDM.
• Change Management: work within client change framework to plan and execute changes.
• Ensure change quality and thorough deployment using standard tools.
• Change preparation and deployment following standard deployment tools.
• General: perform pre-assigned tasks and cooperate with team.
• Adhere to processes, seek training when needed, and escalate when in doubt.
• Minimise operational risk and fraud by working on controls and escalation.
• Contribute to client’s permanent control framework.

Skills

Strong analytical skills

Strong attention to detail

Structured and methodical mind-set

Team oriented

Good interpersonal and communication

Clear communicator in written and oral

English proficiency (B2/C)

Problem solving

Education

Bachelor in Computer Science or equivalent

ITIL Foundation certificate (desirable)

Tools

Siteminder Web SSO

BMC ControlSA

Sailpoint

ForgeRock

LDAP

Tomcat

Apache

nginx

IIS

WS-Security

WAS security models

Ansible

Python

Shell

Apigee API gateway

OAuth2/OpenID Connect

Jira

Microsoft Office (Excel, PowerPoint, Word)

Job description

The SSO team provide identity and access management tooling as a middleware delivery team. The work on authentication and authorisation for both internal and external customers. Using several standardised frameworks, the team maintains and governs access policies and works to deliver technologies to ensure that the right entities have the appropriate access to technology resources.

The candidate will be part of multi-geographical (presence in 3 regions and 6 locations) and multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics:

• Project Delivery
• Platform Support and Maintenance
• Incident and Problem Management
• Change Management
• General

The candidate will also be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Main Responsibilities

Platform Support and Maintenance

• Pro-actively monitor, manage and improve availability and performance of the production environments (from presentation and application layers to Infrastructure layers).
• Pro-actively manage the capacity of production applications.
• Provide feedback and propose solutions to management on performance, capacity and design issues

Incident and Problem Management

• To work with partner teams to conduct analysis of major and critical incidents.
• To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and IDM area.

Change Management

• To work within the change management framework adopted by client’s to ensure that all changes to the production environment are planned and executed in a controlled manner.
• To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.
• Change preparation and deployment following standard application deployment tools and methodology

General

• Perform pre-assigned tasks to accomplish the function responsible for.
• Work cooperatively with the other members of the team
• Ensure adherence to processes and procedures
• Request improvement of knowledge (training) when needed
• Apply own initiative, within the levels of acceptable risk
• Whenever in doubt, escalation and seek advice and guidance
• If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied
• Escalate risks / issues to the manager of the team
• Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.
• Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
• Provide a direct contribution to the client’s operational permanent control framework.

Qualifications & Experience

• CA Siteminder Web SSO
• Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock
• LDAP
• Application Server : Good exposure in configuring and supporting web technologies such as Tomcat, Apache, nginx, IIS
• SOA security - SAML / WS-Security
• IIS/WCF/WIF, WAS security models
• Infrastructure standards for network load balancers, servers, networks and storage
• Automation mind-set with experience in using tools like Ansible
• Scripting skills using Python or shell
• Proven logical and methodical problem analysis and troubleshooting skills
• Working with an industry recognised service desk and project management toolset
• Clear communicator in both written and oral forms
• oAuth2, OpenIDConnect
• Authentication services for APIs
• Exposure to Apigee API gateway
• Knowledge of Process & Quality management, ITIL v2/v3
• Microsoft Project, Advanced Excel, PowerPoint and Word
• Knowledge of Atlasian Jira Task Management toolset

Personal Attributes

• Strong analytical skills
• Strong attention to detail
• Structured and methodical mind-set
• Can do attitude; look at changes as opportunities to improve
• Team oriented
• Good interpersonal and communication skills

Languages & Qualifications

• High English spoken and written fluent (B2/C)
• French spoken and written will be valued
• Bachelor in Computer Science or equivalent
• ITIL Foundation certificate will be desirable