Identity and Access Management (IAM) Security Engineer

Shanghai
Permanent
Full-time

1 month ago

About usAt ExxonMobil, our vision is to lead in energy innovations that advance modern living and a net-zero future. As one of the world's largest publicly traded energy and chemical companies, we are powered by a unique and diverse workforce fueled by the pride in what we do and what we stand for.The success of our Upstream, Product Solutions and Low Carbon Solutions businesses is the result of the talent, curiosity and drive of our people. They bring solutions every day to optimize our strategy in energy, chemicals, lubricants and lower-emissions technologies.We invite you to bring your ideas to ExxonMobil to help create sustainable solutions that improve quality of life and meet society's evolving needs. Learn more about and how we can .ExxonMobil in ChinaExxonMobil has a long history in China dating back to 1892 when its predecessor Standard Oil began marketing kerosene to light the Mei Foo lamps at Chinese homes. Today, ExxonMobil's business portfolio in China spans the full spectrum of the industry, from upstream to downstream, chemicals and technology center.ExxonMobil has a long-term commitment to China through investments, products, technologies and partnerships, helping meet China's growing demand for energy and petrochemical products.What you will doMaintain, support and enhance a number of Tier 0 Identity applications - Active Directory Domain Services, Active Directory Certificate Services, Active Directory Federation Services, Microsoft Entra ID, CyberArk Privileged Cloud and SecureAuth.Tier 0 system support is a component of the IAM Access Area. This candidate will focus primarily on core identity platforms, interfacing with customers, while also managing issues directly with the vendor. This is a great role for anyone with a career interest in Applications Support, Infrastructure support, Identity & Access Management, and Cybersecurity.Support responsibilities may include:

Collaborate with vendors to integrate third party software into a corporate computing environment
Install, configure, and deploy software which may include:
Configuring shared services (web, database, license, etc)
Coordinating testing and troubleshooting with domain experts
Developing scripts to deliver applications
Optimizing performance
Managing privileged and service accounts

General support responsibilities include:

Reviews with application and user support contacts to update application documentation
Collaborate within a global IT organization to resolve issues
Coordinate and communicate with team members throughout the software development and support cycles
Ensure change management procedures are followed
Assess and mitigate application security exposures

About youPosition Specific Skills:

3+ years and strong background of technical skills / experience supporting some/all of the following: Active Directory (AD) services, Microsoft Entra ID, SecureAuth, and CyberArk Privileged Access Management or similar system
Willingness to learn technologies in team scope
Experience with scripting using PowerShell for managing AD, creating scripts, writing automation code
Experience with managing cloud systems (e.g, AWS, Azure, Alibaba)
Implementing and supporting multi-factor authentication (MFA) solutions (e.g., Microsoft Entra MFA, SecureAuth)
Interest and desire to develop and manage complex system integrations between database, web, app servers
Change Management experience coordinating and implementing application enhancements and patches
Working with the vendors (Microsoft, CyberArk, Entrust, SecureAuth) on product issues, troubleshooting, and resolution
Monitoring system health based on defined schedules and rotations
Able to participate in periodic on-call rotations
Demonstrated ability to troubleshoot issues, identify root cause, and recommend solution
Manage support queue and provide feedback to user requests / problems

General Skills:

Project management experience on small to medium scale application implementations
Must have strong analytical ability and problem-solving skills
Must be a self-starter who works well in a global virtual team
Must have strong written and verbal communication skills in English
Ability to multi-task and manage workload under time pressure and changing priorities
Customer service focus

Skills considered an advantage (Nice-to-have):

Knowledge/experience with physical HSM (hardware security module) encryption/cards (configuration and support)
Security and controls experience with privileged systems

Stay connected with usLearn more at ourEqual Opportunity EmployerExxonMobil is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, citizenship status, protected veteran status, genetic information, or physical or mental disability.Alternate Location:Nothing herein is intended to override the corporate separateness of local entities. Working relationships discussed herein do not necessarily represent a reporting connection, but may reflect a functional guidance, stewardship, or service relationship.Exxon Mobil Corporation has numerous affiliates, many with names that include ExxonMobil, Exxon, Esso and Mobil. For convenience and simplicity, those terms and terms like corporation, company, our, we and its are sometimes used as abbreviated references to specific affiliates or affiliate groups. Abbreviated references describing global or regional operational organizations and global or regional business lines are also sometimes used for convenience and simplicity. Similarly, ExxonMobil has business relationships with thousands of customers, suppliers, governments, and others. For convenience and simplicity, words like venture, joint venture, partnership, co-venturer, and partner are used to indicate business relationships involving common activities and interests, and those words may not indicate precise legal relationships.

ExxonMobil

Apply Now