DevSecOps Web Application Security 80%-100%
Role details
Job location
Tech stack
Job description
Develop and enhance authentication flows by utilizing modern authentication protocols in order to provide a seamless desktop and mobile login experience for bank clients
Operate the existing Web Application Firewall (WAF) and Client Identity and Access Management Solution (CIAM) infrastructure together with our team of IAM and WAF engineers
Collaborate with various stakeholders globally to onboard new web applications to the global CIAM platform
Review new or changed requirements and assess their feasibility as well as their impact on the surrounding systems, standards and guidelines
Troubleshoot issues as part of the 2nd and 3rd level support organization and take part in the on-call duty rotation
Enhance the automation and scalability of the WAF and CIAM infrastructure
Continuously improve the overall service reliability, security, performance and monitoring of the WAF / CIAM infrastructure
Requirements
Four or more years of experience with operating Identity and Access Management or Web Application Firewall solutions such as Nevis, F5, Airlock, Cloudflare or open-source alternatives such as ModSecurity
Alternatively five or more years in software development (Java, Spring Boot, React, Typescript)
Profound understanding of security best practices of web applications and APIs
Proven experience with implementation of authentication and federation mechanisms such as SAML, OAuth, OIDC and FIDO
Solid foundation in networking fundamentals with advanced understanding of internet protocol suite (TCP, DNS, HTTP, TLS, etc.)
Strong troubleshooting and structured problem-solving skills
Good understanding of Linux operating systems and its command line tools
Experience with containerization technologies and automation capabilities is of advantage
Team player, strong collaborator with the ability to take ownership
Excellent organizational and communication skills, well-structured and reliable
Willingness and ability to learn new skills
Fluent in spoken and written German and English language
Higher professional education (Swiss Federal Diploma or higher education) or comparable certification (CISSP) with relevant practical knowledge is desired
