SSO IDM Security Lead

Job Description:

The jobholder will be providing support and project delivery for the SSO and Identity Management platforms in the following topics

Architecture

Project Delivery

Platform Support and Maintenance

Incident and Problem Management

Change Management

The candidate should be well versed with cryptographic notions such as RSA, symmetric and asymmetric encryption, certificates and digital signatures etc.

Architecture

To provide architectural expertise thereby driving change and improvement in technology and process.

To contribute to the development of the SSO and LDAP technology roadmaps.

To liaise with CIB architecture teams in undertaking architectural reviews.

Project Delivery

To take responsibility for the delivery of key projects around SSO and LDAP which are aligned to drive significant change within the platform.

To work with the Application Production Support project managers in defining, designing, documenting and implanting new functionality for existing and new applications.

To liaise with the Application Developers in low-level diagnosis of on-going issues.

Platform Support and Maintenance

Pro-actively monitor, manage and improve availability and performance of the production environments

(from presentation and application layers to Infrastructure layers)

Pro-actively manage the capacity of production applications

Incident and Problem Management

To work with partner teams to conduct analysis of major and critical incidents.

To identify tactical or strategic improvements that can be introduced to help reduce the number of on- going incidents within the SSO and LDAP area.

Change Management

To work within the change management framework adopted to ensure that all changes to

the production environment are planned and executed in a controlled manner.

To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that

changes raised are of sufficient standard in terms of technical and planning detail.

Requirements

Technical Skills essential for the role include minimum 15 plus years of experience into

CA Siteminder Web SSO

SOA security - SAML / WS-Security

Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock

LDAP

Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO

Auth2, OpenIDConnect

IIS/WCF/WIF, WAS security models

Infrastructure standards for network load balancers, servers, networks and storage

Automation mind-set with experience in using tools like Ansible

Scripting skills using Python/JS or shell

Application Server : Good exposure in configuring and supporting web technologies such as Tomcat,

Apache, nginx, IIS

Proven logical and methodical problem analysis and troubleshooting skills

Working with an industry recognised service desk and project management toolset

ITIL certification

Shift

On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day

On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.

Public Holidays: Team members must cover all public holidays except 1 st January and 25 th December (2 persons only in shifts)

Interested candidates may apply through the application system or send it to . Shortlisted candidates will be notified.

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to Morgan Mckinley Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at . You acknowledge that you have read, understood, and agree with the Privacy Policy.

Morgan McKinley Pte Ltd
Dinu Dinesh

EA License No: 11C5502

EAP Registration No: R22110286