Commerz Global Service Solutions Hiring! Full Time Senior IAM Engineer (LDAP) in Selangor - Ricebowl

Job Purpose:

Commerzbank AG is the second largest German bank employing more than ************* people. In our Digital Technology Center located in Petaling Jaya, Selangor, Malaysia, we employ more than 300 employees from multiple countries in an agile environment. Our IT division is successful in providing a wide range of quality IT solutions and we are expecting further growth by providing new services and projects to help creating the future of digitalization.

We are looking for an Lightweight Directory Access Protocol ( Oralce LDAP) environment engineer.

You have LDAP and Oralce LDAP Server knowledge. You are also expected to have experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris.

Work Arrangement:

EMEA Hours 08:00 – 17:00 (UTC +01:00) or Malaysian Hours from 3:00PM - 12:00AM.

You may need to support on-call and out of hours support.

Key Activities:

1. Operations & Administration

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure

2. Security & Access Management

• Implement and manage authentication and authorization via LDAP
• Configure secure communication (TLS/SSL, certificates) for LDAP connections
• Define and maintain access control lists (ACLs) and security policies
• Ensure compliance with internal security standards and regulatory requirements

3. Integration & Support

• Integrate applications and services with LDAP for user and group management (e.g. Linux/Unix systems, web applications, IAM solutions)
• Support SSO, IAM, and federation solutions that rely on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance and support to other IT teams and stakeholders

4. Automation, Optimization & Documentation

• Develop scripts and tools (e.g. shell, Python) to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and operational procedures
• Participate in projects to modernize, consolidate, or migrate directory services

Skills Requirements:

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert knowledge of LDAP master-slave replication, high availability and disaster recovery concepts
• Good knowledge in Oracle Unified Directory. Oracle Certified Professional (OCP) knowledge level expected
• Expert knowledge of Kerberos, Single-Sign-On, secure authentication methods
• Familiarity with Python, Perl, shell programming, Solaris and RHEL packaging, release management
• Familiarity with Software Development lifecycle, testing concepts, version control systems, and release management
• Knowledge of Ansible Automation Platform is a plus
• Expert knowledge of Unix permissions, Role Based Access Control as well as general Identity and Access Management concepts
• Experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris
• Security topics (SIEM, Security Patching, PAM)

What we offer:

• Hybrid working arrangement
• 21 days Annual Leave (Prorated)
• Medical Benefits for Employee, Spouse & Child
• Insurance Coverage
• Public Holiday in Lieu
• Flexible Spending Account
• EPF contribution rates will be increased after complete 3, 6, 10, and 14 years of service.
• A key role in shaping bank‑wide capacity management in a global organization
• Exposure to international stakeholders across Asia, Europe and America
• Office reachable by public transport
• Opportunities to drive conceptual work, influence strategy and work with modern tooling
• Professional development in a global banking group with strong focus on risk management and compliance