DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)

Aufgaben

• Seamless desktop and mobile login experience for bank clients
• Develop and maintain high-quality and secure codebases for multiple Single-Page Applications (SPAs), focusing on delivering seamless and efficient login experiences for bank clients
• Collaborate with various stakeholders globally to onboard new client-facing web applications to our global CIAM platform
• Review new or changed requirements and assess their feasibility as well as the impact on surrounding systems, standards and guidelines
• Troubleshoot issues as part of the 2nd and 3rd level support organization and assist in on-call duty rotation
• Enhance the automation and scalability of the WAF and CIAM infrastructure
• Continuously improve the overall service reliability, security, performance, monitoring, and automation of WAF / CIAM infrastructure
• Continuously improve service reliability, security, performance, monitoring, and automation of WAF / CIAM infrastructure, with a focus on enhancing overall system availability and efficient management
• Obtain, maintain and administer management tools, e. g. Selenium for the testing of login flows in changing environments

Anforderungen

• Proven experience in designing and implementing authentication and federation protocols, including SAML, OAuth, OIDC, and FIDO, with a strong understanding of identity and access management principles
• Minimum 4 years of experience in designing, implementing, and managing Web Application Firewalls (WAF) and reverse proxy solutions, including products such as F5, Imperva, Netscaler, open-source alternatives like ModSecurity
• Hands-on operational experience with highly available and scalable web infrastructure
• Profound understanding of security best practices of web applications and API gateways
• Proven experience in working and supporting the Cloudflare application firewall and other open-source alternatives like ModSecurity
• Hands-on operational experience with highly available and scalable web infrastructure
• Profound understanding of security best practices of web applications and API gateways
• Practical knowledge