Linux Systems Engineer – IAM

Job description

The Digital Identity and Signature Services (DISS) provides Identity and Access Management (IAM) services for the European Commission, EU Institutions, Agencies and external users. The Back Office team is responsible for the administration, operation, maintenance and continuous improvement of the DISS services, ensuring secure authentication, authorization and identity lifecycle management across the Commission's information systems. The DISS service consists of the following subservices: Corporate User Provisioning (CUD): retrieves identity data from authoritative HR sources and provisions user accounts across the Commission's IT systems EUDS (Enterprise User Directory Services): provides enterprise directory services, identity synchronization and user information management across IAM platforms EU Login: provides central authentication services, supporting multiple authentication methods and identity federation for internal and external users EU Access: provides centralized authorization and access control services for Commission applications MAUS: provides administration of user access, roles and application permissions MOSAIC: provides identity administration and provisioning automation services SECABC: provides secure address book services and identity information exchange for Commission applications EU CAPTCHA: provides CAPTCHA services for Commission applications Reorganisation services: support organisational changes while ensuring the consistency of identities, provisioning and access rights across the Commission ecosystem Description of tasks Operational activities o Administer, maintain and troubleshoot Identity and Access Management platforms, including authentication, authorization, identity federation, directory and identity provisioning services o Perform deployments, releases, upgrades, patching, configuration changes, backup/restore and infrastructure maintenance o Support infrastructure projects, migrations and application integrations o Collaborate with development, infrastructure and support teams to ensure service continuity and successful project delivery Monitoring & Troubleshooting o Monitor service availability, investigate operational alerts and analyse application, middleware and infrastructure logs using monitoring and logging tools o Perform root cause analysis and contribute to service reliability and continuous improvement Security & Automation o Manage certificates, security configurations and vulnerability remediation o Develop and maintain operational automation scripts Service Management o Manage Incidents, Service Requests, Problems, Changes and Releases in accordance with ITIL best practices o Prepare and maintain implementation procedures, technical documentation and knowledge articles o Provide technical expertise, coaching and knowledge transfer to operational teams Knowledge and skills Technical skills o Linux (RedHat) o Oracle Database o Oracle WebLogic Server o Apache Tomcat o LDAP technologies o Identity and Access Management concepts o Shell, Bash or Perl scripting Tools o Git o Bamboo o Nexus o Dynatrace o Splunk o ServiceNow o Jira Experience o Experience working in Linux-based infrastructure and middleware environments o Experience with Identity and Access Management (IAM) technologies is considered an asset o Experience with IT Service Management (Incident, Change, Release and Problem Management) o Good understanding of ITIL best practices Profile o Strong analytical and problem-solving skills o Ability to adapt quickly to changing priorities o Autonomous, proactive and team-oriented o Good written and spoken English Additional assets o ITIL Foundation certification o Knowledge of PM² or PRINCE2 methodologies o Knowledge of cloud environments and technologies o Experience working within European Commission IT environments o Good written and spoken French Working conditions o Participation in the team's on-call rotation (standby) is required o Occasional work outside standard business hours may be required for planned maintenance, releases or incident resolution