DevSecOps Engineer - Client Identity and Access Management

About the role

Julius Baer is looking for a DevSecOps Engineer to work on its Client Identity and Access (CIAM) infrastructure, improving its service reliability, security, performance, monitoring and automation. The role works closely with a global team of engineers to keep the CIAM platform and the Web Application Firewall (WAF) running smoothly.

Key responsibilities

• Maintain the CIAM platform and WAF infrastructure together with the global engineering team.
• Develop and improve authentication flows using modern protocols so bank clients get a seamless desktop and mobile login.
• Build and maintain secure codebases for several Single-Page Applications (SPAs).
• Help onboard new client-facing web applications to the global CIAM platform.
• Assess new or changed requirements and their impact on systems, standards and guidelines.
• Take part in second and third-level support and the on-call rotation.
• Improve the automation, scalability, reliability, security and monitoring of the WAF and CIAM infrastructure.

Required profile

• Proven experience designing and implementing authentication and federation mechanisms (SAML, OAuth, OIDC, FIDO) and identity and access management principles.
• At least 4 years of experience designing, implementing and managing WAF and reverse proxy solutions (F5, Imperva, Nevis, Cloudflare or open-source alternatives such as ModSecurity).
• Experience with highly available, scalable web infrastructure and solid security knowledge of web applications and APIs.
• Relevant academic background (e.g. Computer Science, Cybersecurity) or recognized certifications (e.g. CISSP, CEH).

Required skills

• Software engineering and operations with Java, Spring Boot, React and TypeScript; Kubernetes-based environments.
• HTTP, TLS, WebSocket and other web protocols.
• Splunk, Elastic or similar log analytics tools.
• Linux command line.