Senior Web Security Engineer - CIAM & WAF 100% (f/m/d)

Job description

Tasks

• Engineering, operations and consulting of Web Application Firewall and Client Identity and Access Management (CIAM) infrastructure
• Review new or changed requirements and assess their feasibility as well as their impact on the surrounding systems, standards and guidelines
• Troubleshoot issues as part of the 2nd and 3rd level support organization and take part in the on-call duty rotation
• Enhance the automation and scalability of the WAF and CIAM infrastructure
• Continuously improve the overall service reliability, security, performance and monitoring of the WAF / CIAM infrastructure

Requirements

• Four or more years of experience with operating Identity and Access Management or Web Application Firewall solutions such as Nevix, FS, Airlock, Cloudflare or open-source alternatives such as ModSecurity
• Profound understanding of security best practices of web applications and APIs
• Proven experience with implementation of authentication and federation mechanisms such as SAML, OAuth, OIDC and FIDO
• Experience in software engineering (Java, Spring Boot, React, Typescript)
• Solid foundation in networking fundamentals with advanced understanding of internet protocol suite (TCP, DNS, HTTP, TLS, etc.)
• Strong troubleshooting and structured problem-solving skills
• Good understanding of Linux operating systems and its command line tools
• Experience with containerization technologies and automation capabilities is an advantage
• Team player, strong collaborator with the ability to take ownership
• Excellent organizational and communication skills, well structured and reliable
• Willingness and ability to learn new skills
• Fluent in spoken and written German and English language
• Higher professional education (Swiss Federal Diploma or higher education) or comparable certification (CISSP) with relevant practical knowledge is desired

We offer

Location and working hours

• Location: Zurich
• Working hours: Full-time