Cyber Security Lead Analyst -LDAP

We are seeking an experienced DevOps Engineer with strong expertise in Linux administration, Identity Management systems (LDAP/FreeIPA), Python scripting and infrastructure automation (Terraform, Ansible). The candidate will play a key role in Build, maintenance, secure efficient management of user identities, access control, authentication process and CI/CD pipelines.

Experience: 8 - 12 years relevant experience required.

Responsibilities:

1.        Red hat IDM administration - Install Configure, manage and Maintain IDM systems including server’s replica's and clients.

2.       LDAP Management – Implement and Maintain LDAP directory services to support Enterprise application and services.

3.       Develop automation scripts and tools using Python

4.      Implement and maintain Infrastructure as Code (Terraform)

5.       Automate configuration management using Ansible

6.       Security Management – Implement best practices for secure access control, MFA and certification management within IDM and LDAP Environment.

7.       Configure Kerberos authentication, SSSD, and access policies (HBAC/ACLs)

8.       Design and maintain CI/CD pipelines (Jenkins/GitLab/Azure DevOps)

9.       Perform system upgrades, patching, and security hardening

10.    Troubleshoot production issues and ensure high availability

11.      In-depth understanding of authentication protocols including Kerberos, SAML and Oauth.

12.     Diagnose and resolve identity related issues including authentication, replication and configuration challenges.

13.     Experience with Certificate management and Public Key infra structure.

14.    Work closely with Security, infrastructure and application teams to ensure alignment with organizational goals and Compliance standards.

15.     Responsible for handling complex & Escalated Incidents and Requests.

16.    Responsible for Change and Problem Management.

17.     CHANGE Management (continuation): realize all deliveries prepared/announced during CAB/Change Advisory board (with chronogram of delivery, communication, …).

18.    Provide required inputs to stakeholders involved in case of critical incidents like outages.

19.    Ensure KPI compliance for all incidents and service calls.

20.   Adhere to documented notification and escalation process.

21.     Participate in regular reviews with the team.

22.   To be proactive and have an Agile mindset to manage and execute Agile Scrum activities.

23.   Point of contact for all escalated issues.

Skill Set:

-          LDAP, REDHAT IDM/ OpenLDAP /389 DS, Shell Scripting, Oauth and Linux/Unix system administration.

-          Strong scripting skills in Python

-          Strong experience with CI/CD tools (Jenkins, GitLab CI, Azure DevOps)

-          Ansible (configuration management), Terraform (Infrastructure provisioning)

Shift Timings

Monday to Friday, 6:30 AM to 21:30h, 9 hour shift (Morning/General/Second shift)

ON Call support 24/7

At Société Générale, we are convinced that people are drivers of change, and that the world of
tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have
a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a
daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.