I. Business Overview The BNP Paribas Group is one of the largest international banking networks, with a presence in 72 countries. The organisation is an international financial services group, with in excess of 202,000 employees with solid roots in Europe, a significant and growing presence in the Americas as well as a solid and fast-growing business in Asia-Pacific.The BNP Paribas Group is organised around two main activities: Retail Banking & Services and Corporate & Institutional Banking (CIB).BNP Paribas works daily with all its stakeholders to create an environment that is respectful of everyone, based on equality, and where fighting discrimination represents a primary goal. Our teams in CIB ITO Production strongly supports these values, and in particular aims at increasing women’s representation, as well as maintaining an inclusive workplace. Women are a valuable asset for our organization, and we strongly encourage them to join our professions. We will always keep a close and mindful watch on discrimination, but also to challenge the unconscious bias and stereotypes.MADRID IT PlatformThe CIB IT Platform for EMEA is responsible to provide IT Services to our Clients ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. This function includes Global Markets Application Production, Local Territory IT Development, the Core Infrastructure environment including Datacentres, Application Production, Security, Architecture as well as elements of the Global Services organisation. II. Context and Role summary The “Production Security” Domain is part of the Corporate & Institutional Banking Information Technology & Operations (CIB ITO) of BNP Paribas. Within this domain, “SSO IDM Production” has a relevant role …CIB IT Production Identity And Automation Factory (IAAF) provides platforms to build digital services around Identity and Access Management (IAM), DevOps and Robotics Process Automation (RPA). These services range from providing SSO and IDM services to DevOps utilities. This includes the support and project deliveries of the platforms as well as on-boarding new customers into the platform.The SSO IDM team is dealing with support and project delivery on the Identity and Access Management technologies: CA SSO, Oracle LDAP, Axway gateways and ControlSA. III. Position - Key Accountabilities The jobholder will be part of a multi-disciplined team, providing support and enhancement for the SSO and Identity Management platforms. The role is focused on production support, and requires a wide range of technical skills. The Production Engineer will work closely and in partnership with development and infrastructure. Platform Support and Maintenance· Pro-actively monitor, manage and improve availability and performance of the production environments (from presentation and application layers to Infrastructure layers)· Pro-actively manage the capacity of production applications· Customize production tools (monitoring, deployment, scheduling etc.)· Provide feedback and propose solutions to management on performance, capacity and design issues Incident and Problem Management· To work with partner teams to conduct analysis of major and critical incidents.· To identify tactical or strategic improvements that can be introduced to help reduce the number of on-going incidents within the SSO and IDM area. Change Management· To work within the change management framework adopted by BNP Paribas to ensure that all changes to the production environment are planned and executed in a controlled manner.· To take responsibility for the quality of changes within the SSO and IDM environments, ensuring that changes raised are of sufficient standard in terms of technical and planning detail.· Change preparation and deployment following standard application deployment tools and methodology The Production Engineer will also work with other teams to respond to incidents and resolve issues promptly, often under pressure, to restore normal services to the business. Therefore, ability to be on call and provide support out of hours is essential. As this is a production support role, focusing across a range of different and evolving technologies, candidates must possess the aptitude and desire to learn. General· Perform pre-assigned tasks to accomplish the function responsible for. · Work cooperatively with the other members of the team· Ensure adherence to processes and procedures· Request improvement of knowledge (training) when needed· Apply own initiative, within the levels of acceptable risk· Whenever in doubt, escalate and seek advice and guidance· If the nature of the position is user-facing, then all the guidelines and principles of user service mentality and behaviour should be applied· Escalate risks / issues to the manager of the team· Minimise operational failure, including but not exclusively, the risk of fraud, by helping to devise, and by implementing, sufficient regular controls.· Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.· Provide a direct contribution to the BNPP operational permanent control framework. As this is a production support role, focusing across a range of different and mostly cutting edge technologies, candidates must possess the aptitude and desire to learn. In addition, ability to be on call and provide support out of hours is essential. IV. Professional Skills, Abilities and Experience Essential:Technical Skills essential for the role include, but not limited to:· CA Siteminder Web SSO· Autoprovisionning tools such as BMC ControlSA, Sailpoint, or Forgerock· LDAP · Application Server : Good exposure in configuring and supporting web technologies such as Tomcat, Apache, nginx, IIS· SOA security - SAML / WS-Security· Kerberos / SSL/TLS / PKI / GSS-API / SPNEGO · IIS/WCF/WIF, WAS security models · Infrastructure standards for network load balancers, servers, networks and storage· Automation mind-set with experience in using tools like Ansible· Scripting skills using Python or shell · Proven logical and methodical problem analysis and troubleshooting skills· Working with an industry recognised service desk and project management toolset · Clear communicator in both written and oral forms Desirable:Technical Skills desirable for the role include:· oAuth2, OpenIDConnect · SQL, Database schema · Authentication services for APIs· Exposure to Apigee API gateway· Knowledge of Process & Quality management, ITIL v2/v3· Microsoft Project, Advanced Excel, PowerPoint and Word· Knowledge of Atlasian Jira Task Management toolset· Previously used ServiceNow as a Service Desk Management product V. Personal Attributes · Strong analytical skills· Strong attention to detail· Structured and methodical mind-set· Can do attitude; look at changes as opportunities to improve· Team oriented· Good interpersonal and communication skills VI. Languages & Qualifications LANGUAGES· High English spoken and written fluent (B2/C)· French spoken and written will be valued QUALIFICATIONS· Bachelor in Computer Science or equivalent· ITIL Foundation certificate will be desirable VII. Others · On Site Services: From 8:00 to 19:00 schedule to cover in weekly shifts of 8 working hours/day· On Call Services: Out of regular schedule, we provide On Call services (out of business hours) to be covered in weekly shifts by team members.· Public Holidays: Team members have to cover all public holidays except 1st January and 25th December (2 persons only in shifts)