DevOps Engineer (SSO, OpenID, Oauth, SAML)
The opportunity
We are seeking a DevOps Engineer to support and maintain our Single Sign-On (SSO) service. You will ensure reliable authentication, identity federation, and smooth integration with downstream systems. Knowledge of infrastructure as code, CI/CD, and secure access patterns is essential.
Day-to-day responsibilities
• Maintain and operate the SSO service (authentication, authorization, token lifecycles, session management).
• Monitor reliability, performance, and security; implement alerting and incident response processes.
• Manage identity providers (SAML/OIDC), metadata exchange, and federation configurations.
• Collaborate with developers and security teams to implement identity-related features and fixes.
• Ensure secure secret management, key rotation, and certificate handling.
• Maintain IaC for SSO infrastructure and related components; implement reproducible environments.
• Develop and maintain CI/CD pipelines for SSO deployment, migrations, and rollbacks.
• Document architecture, runbooks, and standard operating procedures.
• Perform on-call rotation and post-incident reviews; drive continuous improvement.
Who are we looking for
We look for big thinkers. People who can drive positive change, step up and show what’s next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means:
• This role requires Linux proficiency and experience operating services on Linux-based environments.
• 3+ years in platform/DevOps or SRE roles with SSO or identity-related work.
• Strong experience with Terraform and infrastructure automation.
• Proficiency with GitLab CI/CD or similar pipelines; experience automating builds, tests, and deployments.
• Familiarity with IAM concepts, SAML, OIDC, OAuth, and federation mechanisms.
• Experience with cloud platforms (e.g., AWS, GCP, Azure) and secure secret management.
• Scripting skills (e.g., Bash, Python) for automation and tooling.
• Strong problem-solving, communication, and collaboration skills.
Nice to have:
• Experience with LDAP/AD, SCIM, or enterprise identity providers.
• Knowledge of security hardening, auditing, and compliance practices.
• VM orchestration and related tooling.
Perks & Benefits
At Worldline you’ll get the chance to be at the heart of the global payments technology industry and shape how the world pays and gets paid. On top of that, you will also:
• Hybrid Working Policy
• Gift vouchers on the occasion of Christmas/Easter Holidays
• Private medical services
• 21 vacation days/year
• Referral bonuses for new hires recommended by you
• WFH & Flexible Working Hours
• Full access to the “Learning” platform