Senior Web Access Management Engineer 80-100%

SIX drives the transformation of financial markets, blending tradition and future, foundation and growth. The Web Access Management team is responsible for protecting access to business-critical web applications and APIs, aiming to provide stable, secure, and continuously improving access services across reverse proxy, web application firewall, and customer identity platforms.

• Operate and enhance Web Access Management services, including reverse proxy, access gateway, web application firewall, and customer identity components.
• Design, build, and troubleshoot secure authentication and single sign-on flows based on OpenID Connect, OAuth2, and SAML 2.0.
• Configure routing, TLS certificates, access policies, authorization mappings, and upstream integrations for web applications and APIs.
• Tune and maintain web application firewall policies, including OWASP Core Rule Set handling, exceptions, anomaly scoring, and change control.
• Contribute to operational stability, automation, monitoring, incident response, upgrades, disaster recovery readiness, and continuous service improvement.

• Strong hands-on knowledge of reverse proxy or access gateway platforms, including TLS handling, routing, header and cookie management, session handling, and high-availability operations.
• Practical experience with web application firewall technologies, ModSecurity, OWASP Core Rule Set, rule tuning, false-positive handling, and secure publishing patterns.
• Solid understanding of customer identity and access management, identity lifecycle, multi-factor authentication, secure account recovery, token validation, and authorization models.
• Good knowledge of federation and access protocols such as OpenID Connect, OAuth2, SAML 2.0, JWT, PKCE, scopes, claims, certificates, metadata, and key rotation.
• Analytical, security-minded, and collaborative working style, with good communication skills.
• Fluent English is required; German is an advantage.

• Working from home up to 40%.

SIX is a company that values bright minds and encourages growth, driving the transformation of financial markets with a unique blend of tradition and future.

The Web Access Management team is collaborative and security-focused, working closely with application teams, security architects, platform engineers, and service owners in a regulated environment.