Senior Web Access & Security Engineer

SIX; Zürich; Vor Ort; CHF 120.000 - 190.000; Vollzeit

Zusammenfassung

SIX is seeking a Web Access Management Engineer to protect access to web apps and APIs in a regulated environment. You will design and operate secure access patterns, collaborating with security architects, platform engineers and service owners.

Responsibilities include implementing SSO flows with OpenID Connect, OAuth2 and SAML 2.0, configuring policies, TLS, and upstream integrations, and improving automation, monitoring and disaster recovery readiness.

Qualifikationen

• Experience with web application firewall technologies and secure publishing patterns.
• Strong knowledge of identity and access management, and multi-factor authentication.
• Familiarity with federation protocols such as OpenID Connect, OAuth2 and SAML 2.0.
• Analytical, security-minded and collaborative, with good English; German is a plus.

Aufgaben

• Operate and enhance Web Access Management services including reverse proxy and customer identity components.
• Design, build, and troubleshoot secure authentication and single sign-on flows using OIDC, OAuth2 and SAML 2.0.
• Configure routing, TLS certificates, access policies, and upstream integrations for apps and APIs.
• Tune web application firewall policies, including OWASP Core Rule Set handling and changes.
• Contribute to stability, automation, monitoring, incident response, upgrades and DR readiness.

Kenntnisse

Web Access Management

OpenID Connect

OAuth2

SAML 2.0

OWASP

TLS/PKI

German language

English communication

Jobbeschreibung

SIX is seeking a Web Access Management Engineer to protect access to web apps and APIs in a regulated environment. You will design and operate secure access patterns, collaborating with security architects, platform engineers and service owners.

Responsibilities include implementing SSO flows with OpenID Connect, OAuth2 and SAML 2.0, configuring policies, TLS, and upstream integrations, and improving automation, monitoring and disaster recovery readiness.