Keycloak Platform Engineer

We are seeking an experienced Senior Keycloak Platform Engineer to lead the design, development, and maintenance of our enterprise-wide Identity and Access Management (IAM) platform using Keycloak. The ideal candidate will be responsible for architecting secure, scalable authentication and authorization solutions, managing integrations across complex systems, and ensuring high availability, performance, and compliance with security best practices.

Key Responsibilities:

• Lead the architecture, deployment, and optimization of the Keycloak platform.
• Design and implement advanced authentication flows, custom extensions, and themes.
• Manage and maintain realms, clients, roles, policies, and identity provider integrations.
• Integrate Keycloak with diverse applications and APIs using OAuth2, OpenID Connect, and SAML.
• Oversee platform performance monitoring, tuning, and troubleshooting to ensure reliability and scalability.
• Implement disaster recovery, backup strategies, and version upgrades for production systems.
• Ensure security compliance, managing certificates, encryption, and identity federation.
• Collaborate with DevOps, Security, and Application teams to streamline SSO and identity integrations.
• Provide technical leadership and mentorship to junior engineers.
• Maintain comprehensive documentation for configurations, customizations, and operational workflows.

Requirements:

• Bachelors or Masters degree in Computer Science, Information Technology, or a related field.
• 5+ years of hands-on experience with Keycloak or other enterprise IAM platforms.
• Deep understanding of SSO, OAuth2, OpenID Connect, SAML, and LDAP/Active Directory.
• Proficiency in Java / JavaScript for developing custom authenticators and Keycloak extensions.
• Strong experience with Linux environments, Docker/Kubernetes, and CI/CD pipelines.
• Familiarity with PostgreSQL/MySQL and Keycloak database tuning.
• Proven ability to manage scalable, high-availability IAM deployments.
• Strong knowledge of security standards, IAM governance, and identity federation.
• Excellent analytical, troubleshooting, and communication skills.
• Experience working in cloud environments (AWS, Azure, GCP) is a plus.