DevSecOps Engineer – Client Identity and Access Management 100% (f/m/d)

Julius Baer; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Julius Baer in Singapore seeks an engineer to operate and enhance the Client Identity and Access Management platform (CIAM) and Web Application Firewall (WAF) infrastructure. You will implement authentication flows, secure single-page applications, and onboard new client-facing apps to the CIAM platform, collaborating with global teams.

The role requires 4+ years in WAF/reverse proxy, strong IAM knowledge, and hands-on experience with Java/Spring Boot and React/Typescript.

Qualifications

• Experience designing authentication and federation (SAML/OIDC/OAuth) and IAM principles.
• 4+ years in WAF and reverse proxy solutions (F5/Imperva/Nevis/Cloudflare/ModSecurity).
• Hands-on with scalable web infrastructure and high availability.
• Strong security practices for web apps and APIs.
• Solid understanding of HTTP, TLS, WebSocket.
• Experience with Java/Spring Boot and frontend React/Typescript; Kubernetes exposure.

Responsibilities

• Collaborate with global engineering teams to operate CIAM and WAF platforms.
• Develop and enhance authentication flows for desktop and mobile login experiences.
• Build secure SPAs and maintain high-quality codebases for login experiences.
• Onboard new client-facing apps to CIAM platform and review requirements for feasibility.
• Troubleshoot issues in 2nd/3rd line support and participate in on-call rotations.
• Improve automation and scalability of CIAM/WAF infrastructure and monitoring.

Skills

Authentication design

Federation protocols

SAML

OAuth/OIDC

FIDO

Web security

Troubleshooting

Kubernetes

Java Spring Boot

React/Typescript

Education

Bachelor’s or Master’s in CS/Cybersecurity

CISSP

CEH

Tools

F5

Imperva

Nevis

Cloudflare

ModSecurity

Kubernetes

Splunk

Elastic

Job description

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

YOUR CHALLENGE

• Work closely with our global team of engineers to ensure the smooth operation and maintenance of the Client Identity and Access Management Platform (CIAM) as well as the Web Application Firewall (WAF) infrastructure
• Develop and enhance authentication flows by utilizing modern authentication protocols to deliver a seamless desktop and mobile login experience for bank clients
• Develop and maintain high-quality and secure codebases for multiple Single-Page Applications (SPAs), focusing on delivering seamless and efficient login experiences for clients
• Collaborate with various stakeholders globally to onboard new client-facing web applications to the global CIAM platform
• Review new or changed requirements and assess their feasibility as well as their impact on the surrounding systems, standards and guidelines
• Troubleshoot issues as part of the 2nd and 3rd level support organization and take part in the on‑call duty rotation
• Enhance the automation and scalability of the WAF and CIAM infrastructure
• Continuously improve the overall service reliability, security, performance and monitoring of the WAF / CIAM infrastructure
• Continuously improve the service reliability, security, performance, monitoring, and automation of the WAF / CIAM infrastructure, with a focus on enhancing overall system availability and efficiency

YOUR PROFILE

• Proven experience in designing and implementing authentication and federation mechanisms, including SAML, OAuth, OIDC, and FIDO, with a strong understanding of identity and access management principles
• Minimum 4 years of experience in designing, implementing, and managing Web Application Firewall (WAF) and reverse proxy solutions, including products such as F5, Imperva, Nevis, Cloudflare, or open-source alternatives like ModSecurity
• Hands‑on operational experience with highly available and scalable web infrastructure
• Profound understanding of security best practices of web applications and APIs
• Solid understanding of web communication protocols such as HTTP, TLS, WebSocket, etc.
• Experience in software engineering (Java, Spring Boot, React, Typescript) and operational experience with Kubernetes‑based environments
• Strong troubleshooting and structured problem‑solving skills
• Proficient in log analytics and correlation, with hands‑on experience in Splunk, Elastic or similar tooling, to detect anomalies and investigate incidents and identify root causes
• Good technical foundation of Linux operating systems and its command line tools
• Relevant academic background (e.g., Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field) or industry‑recognized certifications (e.g. CISSP, CEH) with relevant practical knowledge