L2 Production Engineer (SSO / LDAP / SOA / IIS / Ansible / Load Balancing / Python / Shell)

Maltem Asia-Pacific; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Maltem Asia-Pacific seeks an L2 Production Support Engineer for an i-Banking client. You will join the APAC Production Security team delivering high-availability platform support across multiple regions.

The role covers incident, problem and change management, SSO/IDM maintenance, and collaboration with engineering, security operations and IAM tooling to ensure secure access and compliant operations. Strong English communication and ITIL familiarity are preferred; on-site Singapore work involves

Qualifications

• Languages: English proficiency (B2/C level) required or strong.

Responsibilities

• Platform Support and Maintenance: monitor and improve availability and performance of production environments across layers.
• Incident and Problem Management: conduct root-cause analysis for major incidents and drive improvements.
• Change Management: follow established change frameworks, ensure high quality deployments and on-call rotations.
• General Responsibilities: adhere to internal processes and manage risk.

Skills

SSO & Directory

Auto-provisioning Tools

Web Servers

SOA Security

Security Models

Infra & Automation

Scripting

Troubleshooting

OAuth/OpenID

Apigee

ITIL Knowledge

Jira/ServiceNow

Education

Bachelor's degree in CS

Tools

Jira

ServiceNow

Job description

Maltem Asia is currently seeking an L2 Production Support Engineer for our i-Banking Client.

Our Client's APAC Production Security teams manage critical IT security functions for our premier clients across the region, specializing in:

• IT Production Security Governance, PMO & Risks
• Network Security and Security Design & Architecture
• Vulnerability & Compliance Management
• IAM Production
• Production CSIRT, Detection & SIEM Engineering
• Production support of core security platforms

II. Context & Role Summary:

The Production Security domain oversees enterprise security solutions within mission‑critical banking and financial environments.

The SSO (Single Sign-On) team functions as a middleware delivery unit providing identity and access management tooling, managing authentication and authorization for both internal and external stakeholders.

Using standardized frameworks, the team maintains and governs access policies to ensure the right entities have appropriate and secure access to technology resources.

As an SSO IDM Production L2 Engineer, you will be part of a multi-geographical (3 regions, 6 locations) and multi-disciplined team providing support and project delivery across the following areas:

• Architecture and Project Delivery
• Platform Support and Maintenance
• Incident, Problem, and Change Management

You will also work closely with cryptographic concepts such as RSA, symmetric/asymmetric encryption, certificates, and digital signatures.

III. Key Accountabilities:

Platform Support and Maintenance:

• Proactively monitor, manage, and improve the availability and performance of production environments (spanning presentation, application, and infrastructure layers).
• Manage production application capacity proactively.
• Provide feedback and propose technical solutions to management regarding performance, capacity, and design challenges.

Incident and Problem Management:

• Partner with cross-functional teams to conduct root‑cause analysis for major and critical incidents.
• Identify tactical and strategic improvements to minimize ongoing incidents within the SSO and IDM domain.

Change Management:

• Operate within established change management frameworks to ensure production changes are planned, controlled, and executed cleanly.
• Take ownership of change quality within the SSO/IDM environments, ensuring high technical and planning standards.
• Prepare and deploy changes utilizing standard application deployment tools and methodologies.
• Participate in on‑call rotations and provide out‑of‑hours support to resolve critical incidents and restore normal business services under pressure.

General Responsibilities:

• Adhere to strict internal processes, procedures, and operational risk controls to minimize failure and fraud risks.
• Apply sound initiative within acceptable risk boundaries, escalating risks and issues appropriately to management.

IV. Professional Skills, Abilities & Experience:

Essential Technical Skills:

• SSO & Directory Services: CA Siteminder Web SSO, LDAP.
• Auto‑provisioning Tools: Experience with tools such as BMC ControlSA, Sailpoint, or Forgerock.
• Web Technologies & Application Servers: Strong exposure to configuring and supporting Tomcat, Apache, nginx, IIS.
• SOA Security & Protocols: SAML/WS‑Security, Kerberos/SSL/TLS/PKI/GSS‑API/SPNEGO.
• Security Models: IIS/WCF/WIF, WAS security models.
• Infrastructure & Automation: Understanding of network load balancers, servers, and storage; automation mindset with experience in tools like Ansible.
• Scripting: Proficiency in Python or Shell scripting.
• Core Competencies: Proven logical problem‑solving abilities, excellent troubleshooting skills, and clear written/verbal communication.
• OAuth2, OpenIDConnect, and API authentication services.
• Exposure to the Apigee API gateway.
• Knowledge of ITIL (v2/v3) frameworks and Process & Quality management.
• Familiarity with Atlassian Jira and ServiceNow toolsets.

V. Personal Attributes:

• Strong analytical skills with high attention to detail.
• Structured, methodical, and "can‑do" mindset (viewing changes as opportunities to improve).
• Team‑oriented with strong interpersonal and communication skills.
• High aptitude and desire to learn evolving cutting‑edge technologies.

VI. Languages & Qualifications:

• Languages: High proficiency in spoken and written English (B2/C level); French language skills are a plus.
• Qualifications: Bachelor’s degree in Computer Science or equivalent. ITIL Foundation certification is desirable.
• On‑Site Schedule: Weekly rotating shifts covering standard operational hours (8:00 AM to 7:00 PM, 8 working hours per day).
• On‑Call Services: Out‑of‑hours on‑call support covered in weekly team rotations.
• Public Holidays: Rotational coverage required for public holidays (excluding 1 Jan & 25 Dec, operated by a skeleton crew of 2 staff members).