Sso & Identity Management - L2 Production Specialist

In a changing world, unprecedented challenges require unmatched talent. Join one of Montreal's Top Employers in 2024. We are a dynamic and growing organization having its main establishment located in downtown Montreal and part of a leading international banking institution fully committed to building a more sustainable future. Note that the position may be in the Canadian Branch of BNP Paribas or in one of its subsidiaries based in Montreal.

**The position at a glance**

The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP PARIBAS, it manages all the security solutions.

The SSO team provide identity and access management tooling as a middleware delivery team, supporting authentication and authorisation for both internal and external customers.

Using several standardised frameworks, the team maintains and governs access policies and works to deliver technologies to ensure that the right entities have the appropriate access to technology resources.

The jobholder will be part of multi-geographical (presence in 3 regions and 6 locations) and multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics:
The responsibilities of the SSO IDM Production L2 are as follows:
Single Sign On Implementation and support

Platform Support and Maintenance

Incident and Problem Management

Change Management

General

**In detail**

**General**

Perform pre-assigned tasks to accomplish the function responsible for.

Work cooperatively with the other members of the team.

Ensure adherence to processes and procedures.

Request improvement of knowledge (training) when needed.

Whenever in doubt, escalate and seek advice and guidance.

If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied.

Escalate risks / issues to the manager of the team.

Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.

Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.

Provide a direct contribution to the BNPP operational permanent control framework.

**Single Sign On Implementation and support**

Work closely to the client to provide the best solution.

Resolve incident about authentication.

**Platform Support and Maintenance**

Customize production tools (monitoring, deployment, scheduling etc.).

Provide feedback and propose solutions to management on performance, capacity and design issues.

**Incident and Problem Management**

To work with partner teams to conduct analysis of major and critical incidents.

To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and IDM area.

**Change Management**

To work within the change management framework adopted by BNP Paribas to ensure that all changes to the production environment are planned and executed in a controlled manner.

To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.

The Production Engineer will also work with other teams to respond to incidents and resolve issues promptly, often under pressure, to restore normal services to the business. Therefore, ability to be on call and provide support out of hours is essential.

Work conditions: This position provides for standard working conditions in an office and from Monday to Friday.

On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day.

On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.

Public Holidays: Team members must cover all public holidays except 1st January and 25th December (2 persons only in shifts).

**The strengths and skills that will help you succeed**

Technical Skills essential for the role include, but not limited to:
Bachelor’s in computer science or equivalent.

Minimum 3 to 5 years of experience.

ITIL Foundation certificate will be desirable.

CA Siteminder Web SSO.

Autoprovisionning tools such as BMC ControlSA, Sailpoint IdentityIQ, or Forgerock.

LDAP.

Application Server : Good exposure in configuring and supporting web technologies such as Tomcat, Apache, nginx, IIS.

SOA security - SAML / WS-Security.

Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO.

IIS/WCF/WIF, WAS security models.

Infrastructure standards for network load balancers, servers, networks and storage.

Automation mind-set with experience in using tools like Ansible.

Scripting skills using Python or shell.

Proven logical and methodical problem analysis and troubleshooting skills.

Working wit