DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)

Tasks

• Development and maintenance of high-quality, secure codebases for multiple single-page applications (SPAs), with a focus on providing seamless and efficient login experiences for customers
• Collaborate with various stakeholders worldwide to integrate new customer-centric web applications into the global CIAM platform
• Reviewing new or modified requirements and assessing their feasibility and their impact on surrounding systems, standards, and guidelines
• Troubleshooting as part of the WAF and Level 3 support organization, and on-call support
• Increasing the automation and scalability of the WAF and CIAM infrastructure
• Continuous improvement of the overall service reliability, security, performance, and operation of the CIAM infrastructure
• Continuous improvement of service reliability, security, performance, monitoring, and automation of the WAF/CIAM infrastructure, with a focus on increasing overall system availability and efficiency

Requirements

• Proven experience in designing and implementing authentication and federated identity management, including SAML, OAuth, OIDC, and FIDO, with a strong understanding of the principles of identity management
• At least 4 years of experience in designing, implementing, and managing Web Application Firewall (WAF) and reverse proxy solutions, including products such as F5, Imperva, Netscaler, or similar
• Proven experience in the implementation and configuration of firewalls, network security, and secure access management devices
• Demonstrated ability to design and implement a highly available and secure network architecture to protect the business
• A strong commitment to continuously improving the performance, scalability, and security of operating systems
• Significant interest in defining and implementing effective automation routines using various infrastructure automation scripting tools
• Strong interest in defining and implementing effective automation routines using various platforms to provide a seamless desktop and mobile login experience for bank customers
• Practical operational experience with highly available and scalable web infrastructures
• In-depth understanding of security best practices for web applications and APIs
• A systematic and structured approach to work
• Proven experience in creating and implementing documentation
• Good written communication skills in English
• An eye for detail and a solution-oriented approach
• Solid knowledge of web technologies (HTML, CSS, JavaScript, etc.)
• IT certificate for a “Master of Advanced Studies” or “Diploma of Advanced Studies” in e-business/e-commerce, IT security, computer science, or a related field
• Knowledge of ITIL/ISO 27001
• Cybersecurity or a related field, or industry-recognized certifications (e.g., CISSP, CISM)