The BNP Paribas Group is one of the largest international banking networks, with a presence in 72 countries.
The organisation is an international financial services group, with in excess of 202,000 employees with solid roots in Europe, a significant and growing presence in the Americas as well as a solid and fast-growing business in Asia-Pacific.
The BNP Paribas Group is organised around two main activities: Retail Banking & Services and Corporate & Institutional Banking (CIB).
Madrid IT Platform The CIB IT Platform for EMEA is responsible for providing IT Services to our Clients, ensuring a Digital Market evolution in a secured and performant environment, and with reliable quality.
This function includes Global Markets Application Production, Local Territory IT Development, the Core Infrastructure environment including Datacentres, Application Production, Security, Architecture as well as elements of the Global Services organisation.
Context and Role Summary The "Production Security" Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP Paribas.
Within this domain, "SSO IDM Production" has a relevant role.
CIB IT Production Identity And Automation Factory (IAAF) provides platforms to build digital services around Identity and Access Management (IAM), DevOps, and Robotics Process Automation (RPA).
These services range from providing SSO and IDM services to DevOps utilities.
This includes the support and project deliveries of the platforms as well as onboarding new customers into the platform.
The SSO IDM team is dealing with support and project delivery on the Identity and Access Management technologies: SiteMinder, LDAP, Axway gateways, ControlSA.
Position - Key Accountabilities The jobholder will be part of a multi-disciplined team, providing support and project delivery for the SSO and Identity Management platforms in the following topics: Architecture: To provide architectural expertise thereby driving change and improvement in technology and process.
To contribute to the development of the SSO and IDM technology roadmap.
To liaise with CIB architecture teams in undertaking architectural reviews.
To stay abreast of emerging technologies and technology trends.
Project Delivery: To take responsibility for the delivery of key projects around SSO and IDM which are aligned to drive significant change within the platform.
To liaise with the Application Developers in low-level diagnosis of ongoing issues.
To act as technology evangelists for the improvement of process and technology in use for the Authentication services within BNP Paribas.
Platform Support and Maintenance: Incident and Problem Management: To work with partner teams to conduct analysis of major and critical incidents and identify tactical or strategic improvements that can be introduced to help reduce the number of ongoing incidents within the SSO and IDM area.
Change Management: To work within the change management framework adopted by BNP Paribas to ensure that all changes to the production environment are planned and executed in a controlled manner.
To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.
Attending and sharing knowledge/updates in the Weekly Change Control Board Meetings and the Weekly Problem Management Meetings.
General: Perform pre-assigned tasks to accomplish the function responsible for.
The nature of these tasks are Change The Bank or Run The Bank.
Work cooperatively with the other members of the team.
Ensure adherence to processes and procedures.
Request improvement of knowledge (training) when needed.
Whenever in doubt, escalate and seek advice and guidance.
If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied.
Escalate risks/issues to the manager of the team.
Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise and implement sufficient regular controls.
Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
Provide a direct contribution to the BNPP operational permanent control framework.
Professional Skills, Abilities, and Experience Essential: Technical Skills essential for the role include, but are not limited to: CA Siteminder Web SSO Axway Security gateway Autoprovisioning tools such as BMC ControlSA, Sailpoint, or Forgerock LDAP SOA security - SAML / WS-Security Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO oAuth2, OpenIDConnect IIS/WCF/WIF, WAS security models Infrastructure standards for network load balancers, servers, networks, and storage Automation mindset with experience in using tools like Ansible Scripting skills using Python #J-18808-Ljbffr