Senior Sysops Engineer - IBM Guardium & ILMT

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

Position details

We are seeking an experienced Senior IBM Guardium & ILMT Administrator / Subject Matter Expert (SME) to lead the administration, governance, compliance, and continuous enhancement of IBM Guardium Data Security and IBM License Metric Tool (ILMT) platforms.

The successful candidate will be responsible for safeguarding enterprise data assets, monitoring database activities, ensuring regulatory compliance, managing IBM software licensing compliance, supporting software asset governance, and maintaining audit readiness across the organization.

This role will work closely with Infrastructure, Database, Security, Audit, Compliance, Asset Management, Procurement, and Risk teams to strengthen cybersecurity controls, improve software asset governance, and support enterprise compliance initiatives.

Key Responsibilities

IBM Guardium Administration & Data Security:

Guardium Platform Administration & Architecture

• Administer and manage IBM Guardium infrastructure including Collectors, Aggregators, Central Managers, and Data Security Analytics components.
• Design, implement, and maintain scalable Guardium architecture to support enterprise database environments.
• Perform installation, configuration, upgrades, migrations, patch management, and health checks of Guardium appliances.
• Manage Guardium agents (S-TAP) deployment across database servers and cloud platforms.
• Define platform standards, architecture guidelines, and operational best practices.

Database Activity Monitoring (DAM)

• Configure and maintain real-time database activity monitoring across critical database environments.
• Monitor privileged user activities, sensitive data access, policy violations, and unauthorized database actions.
• Develop and manage monitoring policies, exception rules, and alerting mechanisms.
• Investigate database security incidents and suspicious activities using Guardium monitoring data.
• Implement risk-based monitoring and alert prioritization strategies.

Security and Compliance:

• Knowledge of data security best practices and industry regulations (e.g., GDPR, HIPAA, PCI DSS). 
• Ability to identify and mitigate data security risks and vulnerabilities. 
• Experience with data loss prevention (DLP) and data security posture management (DSPM) solutions. 

Dashboard & Reporting Engineering

• Design and develop operational, security, executive, and compliance dashboards.
• Create reports and visualizations covering:
  • Database access activities
  • Sensitive data exposure
  • Compliance status
  • Security incidents
  • User activity monitoring
  • Vulnerability assessment findings
• Automate reporting processes and scheduled report distribution.

Integration & Automation

• Integrate Guardium with enterprise security ecosystem including:
  • SIEM platforms (Splunk, QRadar)
  • ServiceNow ITSM
  • IAM Solutions
  • CyberArk
  • Vulnerability Management Platforms
• Develop automation scripts using Python, Shell, or PowerShell.
• Automate report generation, incident creation, and policy deployment activities.
• Support API-based integrations and workflow automation initiatives.

Troubleshooting and Support:

• Troubleshooting and resolving Guardium-related issues.
• Providing technical support to users of Guardium.
• Staying up-to-date with the latest Guardium features and best practices.

Operational Support & Continuous Improvement

• Monitor platform health, capacity, performance, and availability.
• Troubleshoot S-TAP, collector, policy, and reporting issues.
• Maintain operational runbooks, SOPs, architecture diagrams, and support documentation.
• Stay updated with Guardium product roadmap, security threats, and compliance requirements.
• Participate in security incident response and forensic investigations when required.

ILMT Platform Administration

• Install, configure, upgrade, and support IBM License Metric Tool (ILMT) infrastructure.
• Administer IBM BigFix components supporting ILMT.
• Manage ILMT server configurations, software catalogs, agents, and inventory collection processes.
• Ensure system availability, performance, and operational health.

Software Asset & License Compliance Management

• Manage IBM software inventory and licensing compliance across enterprise environments.
• Monitor software consumption and entitlement utilization.
• Track licensing metrics including:
  • PVU (Processor Value Unit)
  • VPC (Virtual Processor Core)
  • FlexPoint Licensing
  • Sub-Capacity Licensing
• Identify licensing risks and optimization opportunities.

Audit & Compliance Governance

• Generate and maintain IBM audit evidence and licensing reports.
• Support IBM software license audits and internal compliance reviews.
• Validate inventory accuracy and software license allocations.
• Maintain compliance with IBM licensing policies and contractual obligations.

Job Requirements

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or a related discipline. 
• Overall 8+ years of IT experience.
• Minimum 4+ years of hands-on experience with IBM Guardium.
• Minimum 3+ years of experience administering IBM ILMT and BigFix.
• Experience supporting enterprise-scale security, compliance, and software asset management environments.
• Experience working within banking, financial services, or highly regulated industries is preferred.
• Experience supporting enterprise-scale monitoring environments across infrastructure and application landscapes.
• Strong experience working with Linux/RHEL/Windows environments. 
• Demonstrates advanced troubleshooting skills, analytical approach, and expertise in root-cause analysis within complex distributed environments.
• This role operates in the Singapore Time zone.

Preferred Qualifications

• IBM Guardium Data Protection Certification.
• IBM Certified Security Administrator – Guardium.
• IBM ILMT / BigFix Certification.
• CISSP, CISM, CRISC, or equivalent security certification.
• ITIL Foundation Certification.
• Certified Software Asset Manager (CSAM) certification.
• Experience with cloud security and software asset governance.

Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.