LDAP Engineer

Work Arrangement:

EMEA Hours 08:00 – 17:00 (UTC +01:00) or Malaysian Hours from 3:00PM - 12:00AM.

You may need to support on-call and out of hours support.

Key Activities:

1. Operations & Administration

• Install, configure, and maintain LDAP servers and related components
• Manage entries, groups, organizational units, and directory structure
• Handle backup, restore, and disaster recovery processes for directory data
• Monitor system health, performance, and capacity of LDAP infrastructure

2. Security & Access Management

• Implement and manage authentication and authorization via LDAP
• Configure secure communication (TLS/SSL, certificates) for LDAP connections
• Define and maintain access control lists (ACLs) and security policies
• Ensure compliance with internal security standards and regulatory requirements

3. Integration & Support

• Integrate applications and services with LDAP for user and group management (e.g. Linux/Unix systems, web applications, IAM solutions)
• Support SSO, IAM, and federation solutions that rely on LDAP
• Troubleshoot directory-related issues for application and infrastructure teams
• Provide technical guidance and support to other IT teams and stakeholders

4. Automation, Optimization & Documentation

• Develop scripts and tools (e.g. shell, Python) to automate LDAP operations and reporting
• Analyze and optimize LDAP performance (indexes, queries, caching, replication)
• Maintain documentation of directory architecture, configurations, standards, and operational procedures
• Participate in projects to modernize, consolidate, or migrate directory services

Skills Requirements:

• Expert LDAP knowledge, experience in using LDAP tools, LDIF, LDAP hierarchy, schema management, management of LDAP objects
• Expert knowledge of LDAP master-slave replication, high availability and disaster recovery concepts
• Good knowledge in Oracle Unified Directory. Oracle Certified Professional (OCP) knowledge level expected
• Expert knowledge of Kerberos, Single-Sign-On, secure authentication methods
• Familiarity with Python, Perl, shell programming, Solaris and RHEL packaging, release management
• Familiarity with Software Development lifecycle, testing concepts, version control systems, and release management
• Knowledge of Ansible Automation Platform is a plus
• Expert knowledge of Unix permissions, Role Based Access Control as well as general Identity and Access Management concepts
• Experience with OS side administration of Red Hat Enterprise Linux and Oracle Solaris
• Security topics (SIEM, Security Patching, PAM)

What we offer:

• Hybrid working arrangement
• 21 days Annual Leave (Prorated)
• Medical Benefits for Employee, Spouse & Child
• Insurance Coverage
• Public Holiday in Lieu
• Flexible Spending Account
• EPF contribution rates will be increased after complete 3, 6, 10, and 14 years of service.
• A key role in shaping bank‑wide capacity management in a global organization
• Exposure to international stakeholders across Asia, Europe and America
• Office reachable by public transport
• Opportunities to drive conceptual work , influence strategy and work with modern tooling
• Professional development in a global banking group with strong focus on risk management and compliance