DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)

Bank Julius Bär & Co. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Julius Baer seeks an experienced CIAM/WAF engineer to enhance authentication flows, secure web applications, and automate infrastructure across global teams. You will implement modern authentication protocols, manage secure codebases for SPAs, and ensure high availability of CIAM/WAF platforms.

The role requires hands-on security engineering, Linux proficiency, and strong problem-solving skills in a Kubernetes-driven environment. Join a leading Swiss wealth manager with a global presence.

Qualifications

• Proven experience designing authentication and federation using SAML, OAuth, OIDC, and FIDO.
• Minimum 4 years designing and managing WAF/reverse proxy solutions (F5, Imperva, Nevis, Cloudflare or open-source like ModSecurity).
• Hands-on operational experience with scalable web infrastructure.
• Strong understanding of web APIs and security best practices.
• Experience with Java, Spring Boot, React/Typescript and Kubernetes environments.
• Proficient in log analytics tools (Splunk/Elastic) for incident detection.

Responsibilities

• Collaborate with global engineering teams to operate CIAM and WAF infrastructure.
• Develop secure and seamless authentication flows for desktop and mobile customers.
• Build and maintain secure SPAs delivering login experiences.
• Onboard new web apps to the CIAM platform with stakeholders.
• Assess feasibility and impact of new requirements on systems and standards.
• Troubleshoot issues in 2nd/3rd line support and participate in on-call rotations.
• Improve automation and scalability of CIAM/WAF infrastructure.
• Improve overall reliability, security, and monitoring of CIAM/WAF.

Skills

Authentication

WAF

Web security

SAML

OAuth

OIDC

FIDO

Linux

Troubleshooting

Log analysis

Education

Bachelor's or Master's in CS/Cybersecurity

Tools

Splunk

Elastic

Kubernetes

F5

Imperva

ModSecurity

Cloudflare

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

Continuously improve the service reliability, security, performance, monitoring, and automation of the Client Identity and Access (CIAM) infrastructure.

IHRE AUFGABEN

• Work closely with our global team of engineers to ensure the smooth operation and maintenance of the Client Identity and Access Management Platfrom (CIAM) as well as the Web Application Firewall (WAF) infrastructure
• Develop and enhance authentication flows by utilizing modern authentication protocols to deliver a seamless desktop and mobile login experience for bank clients
• Develop and maintain high-quality and secure codebases for multiple Single-Page Applications (SPAs), focusing on delivering seamless and efficient login experiences for clients
• Collaborate with various stakeholders globally to onboard new client-facing web applications to the global CIAM platform
• Review new or changed requirements and assess their feasibility as well as their impact on the surrounding systems, standards and guidelines
• Troubleshoot issues as part of the 2nd and 3rd level support organization and take part in the on‑call duty rotation
• Enhance the automation and scalability of the WAF and CIAM infrastructure
• Continuously improve the overall service reliability, security, performance and monitoring of the WAF / CIAM infrastructure
• Continuously improve the service reliability, security, performance, monitoring, and automation of the WAF / CIAM infrastructure, with a focus on enhancing overall system availability and efficiency

YOUR PROFILE

• Proven experience in designing and implementing authentication and federation mechanisms, including SAML, OAuth, OIDC, and FIDO, with a strong understanding of identity and access management principles
• Minimum 4 years of experience in designing, implementing, and managing Web Application Firewall (WAF) and reverse proxy solutions, including products such as F5, Imperva, Nevis, Cloudflare, or open-source alternatives like ModSecurity
• Hands‑on operational experience with highly available and scalable web infrastructure
• Profound understanding of security best practices of web applications and APIs
• Solid understanding of web communication protocols such as HTTP, TLS, Websocket, etc.
• Experience in software engineering (Java, Spring Boot, React, Typescript) and operational experience with Kubernetes-based environments
• Strong troubleshooting and structured problem‑solving skills
• Proficient in log analytics and correlation, with hands‑on experience in Splunk, Elastic or similar toolings, to detect anomalies and investigate incidents and identify root causes
• Good technical foundation of Linux operating systems and its command line tools
• Relevant academic background (e.g., Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field) or industry‑recognized certifications (e.g. CISSP, CEH) with relevant practical knowledge

Why join Julius Baer?

The international reference in wealth management Julius Baer is the leading Swiss wealth management group.

We focus on servicing and advising sophisticated private clients from around the world, taking into account what truly matters to them – in their business and personal life, today and for future generations.

Headquartered in Zurich, we are present in around 60 locations worldwide, including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai, Santiago de Chile, Shanghai, Singapore, Tel Aviv, and Tokyo.

At Julius Baer our employees enjoy the benefits of a global company with the support and collegiality of a much smaller one. We are growing quickly, but we remain dedicated to maintaining our accessible structure with flat hierarchies, and approachable and supportive leaders. With offices around the world, we offer an international and stimulating work environment and the opportunity to work with a diverse team of highly motivated colleagues, bringing the best of the bank to our clients. Our core values of Care, Passion, and Excellence define the tone of how we interact with each other and our partners.

Committed to your success Whether nurturing young talent with our renowned apprentice scheme, enabling ambitious university graduates to put theory into practice with our Graduate Programme, or providing first‑class opportunities for experienced professionals, we look after our employees.

We believe in continuous learning as a company and as individuals, which is why we put a focus on the health and well‑being of our employees and offer flexible working options, a wide array of benefits, and extensive career development programmes.

For more information visit www.juliusbaer.com or contact us via the Contact Form.