DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)

Tasks

• Seamless desktop and mobile login experience for bank customers
• Develop and maintain high-quality, secure codebases for multiple single-page applications (SPAs), with a focus on delivering seamless and efficient login experiences for bank clients
• Collaborate with various stakeholders worldwide to integrate new client-facing web applications into our global CIAM platform
• Review new or changed requirements and assess their feasibility as well as their impact on related systems, standards, and guidelines
• Troubleshoot issues as part of the second- and third-level support team and assist with the on-call rotation
• Enhance the automation and scalability of the WAF and CIAM infrastructure
• Continuously improve the overall service reliability, security, performance, monitoring, and automation of the WAF/CIAM infrastructure
• Continuously improve the reliability, security, performance, monitoring, and automation of the WAF/CIAM infrastructure, with a focus on enhancing overall system availability and efficient management
• Obtain, maintain, and administer management tools, such as Selenium, for testing login flows in changing environments

Requirements

• Proven experience in designing and implementing authentication and federation protocols, including SAML, OAuth, OIDC, and FIDO, with a strong understanding of identity and access management principles
• At least 4 years of experience in designing, implementing, and managing Web Application Firewalls (WAF) and reverse proxy solutions, including products such as F5, Imperva, Netscaler, and open-source alternatives like ModSecurity
• Hands-on operational experience with highly available and scalable web infrastructure
• A thorough understanding of security best practices for web applications and API gateways
• Proven experience working with and supporting the Cloudflare application firewall and other open-source alternatives such as ModSecurity
• Hands-on operational experience with highly available and scalable web infrastructure
• A thorough understanding of security best practices for web applications and API gateways
• Practical knowledge