DevSecOps Engineer: CIAM, WAF & Secure Auth

Bank Julius Bär & Co. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Julius Baer seeks an experienced CIAM/WAF engineer to enhance authentication flows, secure web applications, and automate infrastructure across global teams. You will implement modern authentication protocols, manage secure codebases for SPAs, and ensure high availability of CIAM/WAF platforms.

The role requires hands-on security engineering, Linux proficiency, and strong problem-solving skills in a Kubernetes-driven environment. Join a leading Swiss wealth manager with a global presence.

Qualifications

• Proven experience designing authentication and federation using SAML, OAuth, OIDC, and FIDO.
• Minimum 4 years designing and managing WAF/reverse proxy solutions (F5, Imperva, Nevis, Cloudflare or open-source like ModSecurity).
• Hands-on operational experience with scalable web infrastructure.
• Strong understanding of web APIs and security best practices.
• Experience with Java, Spring Boot, React/Typescript and Kubernetes environments.
• Proficient in log analytics tools (Splunk/Elastic) for incident detection.

Responsibilities

• Collaborate with global engineering teams to operate CIAM and WAF infrastructure.
• Develop secure and seamless authentication flows for desktop and mobile customers.
• Build and maintain secure SPAs delivering login experiences.
• Onboard new web apps to the CIAM platform with stakeholders.
• Assess feasibility and impact of new requirements on systems and standards.
• Troubleshoot issues in 2nd/3rd line support and participate in on-call rotations.
• Improve automation and scalability of CIAM/WAF infrastructure.
• Improve overall reliability, security, and monitoring of CIAM/WAF.

Skills

Authentication

WAF

Web security

SAML

OAuth

OIDC

FIDO

Linux

Troubleshooting

Log analysis

Education

Bachelor's or Master's in CS/Cybersecurity

Tools

Splunk

Elastic

Kubernetes

F5

Imperva

ModSecurity

Cloudflare

Job description

Julius Baer seeks an experienced CIAM/WAF engineer to enhance authentication flows, secure web applications, and automate infrastructure across global teams. You will implement modern authentication protocols, manage secure codebases for SPAs, and ensure high availability of CIAM/WAF platforms.

The role requires hands-on security engineering, Linux proficiency, and strong problem-solving skills in a Kubernetes-driven environment. Join a leading Swiss wealth manager with a global presence.