DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)
Julius Baer2 hours ago
Singapore, SingaporeMid Level
Responsibilities
- Operate and maintain the global Client Identity and Access Management platform and Web Application Firewall infrastructure.
- Design and enhance authentication and federation flows for seamless desktop and mobile login experiences.
- Develop and maintain secure codebases for multiple Single-Page Applications.
- Collaborate with stakeholders to onboard client-facing web applications to the global CIAM platform.
- Assess new or changed requirements for feasibility and impact on surrounding systems, standards, and guidelines.
- Improve the reliability, security, performance, monitoring, automation, scalability, and availability of CIAM and WAF services.
- Provide second- and third-level support, troubleshoot incidents, investigate root causes, and participate in on-call rotations.
Requirements
- Proven experience designing and implementing authentication and federation mechanisms using SAML, OAuth, OIDC, and FIDO, with strong identity and access management knowledge.
- At least 4 years of experience designing, implementing, and managing WAF and reverse-proxy solutions, including F5, Imperva, Nevis, Cloudflare, ModSecurity, or similar alternatives.
- Hands-on operational experience with highly available and scalable web infrastructure.
- Strong understanding of web application and API security best practices and protocols including HTTP, TLS, and WebSocket.
- Software engineering experience with Java, Spring Boot, React, and TypeScript, plus operational experience with Kubernetes-based environments.
- Proficiency in log analytics and correlation using Splunk, Elastic, or similar tools to detect anomalies, investigate incidents, and identify root causes.
- Solid Linux operating-system and command-line experience, along with strong troubleshooting and structured problem-solving skills.
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field, or an industry-recognized certification such as CISSP or CEH with relevant practical knowledge.
Tech Stack