Senior Web Access Management Engineer 80-100%

SIX; Zürich; Vor Ort; CHF 120.000 - 190.000; Vollzeit

Zusammenfassung

SIX is seeking a Web Access Management Engineer to protect access to web apps and APIs in a regulated environment. You will design and operate secure access patterns, collaborating with security architects, platform engineers and service owners.

Responsibilities include implementing SSO flows with OpenID Connect, OAuth2 and SAML 2.0, configuring policies, TLS, and upstream integrations, and improving automation, monitoring and disaster recovery readiness.

Qualifikationen

• Experience with web application firewall technologies and secure publishing patterns.
• Strong knowledge of identity and access management, and multi-factor authentication.
• Familiarity with federation protocols such as OpenID Connect, OAuth2 and SAML 2.0.
• Analytical, security-minded and collaborative, with good English; German is a plus.

Aufgaben

• Operate and enhance Web Access Management services including reverse proxy and customer identity components.
• Design, build, and troubleshoot secure authentication and single sign-on flows using OIDC, OAuth2 and SAML 2.0.
• Configure routing, TLS certificates, access policies, and upstream integrations for apps and APIs.
• Tune web application firewall policies, including OWASP Core Rule Set handling and changes.
• Contribute to stability, automation, monitoring, incident response, upgrades and DR readiness.

Kenntnisse

Web Access Management

OpenID Connect

OAuth2

SAML 2.0

OWASP

TLS/PKI

German language

English communication

Jobbeschreibung

Are you passionate about secure web access, identity, and modern authentication technologies? Then our Web Access Management team wants to hear from you. We are a collaborative and security-focused team responsible for protecting access to business-critical web applications and APIs. Our goal is to provide stable, secure, and continuously improving access services across reverse proxy, web application firewall, and customer identity platforms. In this role, you will work closely with application teams, security architects, platform engineers, and service owners to design, operate, and enhance secure access patterns in a regulated environment.

What You Will Do

• Operate and enhance Web Access Management services, including reverse proxy, access gateway, web application firewall, and customer identity components.
• Design, build, and troubleshoot secure authentication and single sign-on flows based on OpenID Connect, OAuth2, and SAML 2.0.
• Configure routing, TLS certificates, access policies, authorization mappings, and upstream integrations for web applications and APIs.
• Tune and maintain web application firewall policies, including OWASP Core Rule Set handling, exceptions, anomaly scoring, and change control.
• Contribute to operational stability, automation, monitoring, incident response, upgrades, disaster recovery readiness, and continuous service improvement.

What You Bring

• Practical experience with web application firewall technologies, ModSecurity, OWASP Core Rule Set, rule tuning, false-positive handling, and secure publishing patterns.
• Solid understanding of customer identity and access management, identity lifecycle, multi-factor authentication, secure account recovery, token validation, and authorization models.
• Good knowledge of federation and access protocols such as OpenID Connect, OAuth2, SAML 2.0, JWT, PKCE, scopes, claims, certificates, metadata, and key rotation.
• Analytical, security-minded, and collaborative working style, with good communication skills; fluent English is required, German is an advantage.