2 TransformHub Jobs

Overview :

We are seeking a Keycloak Subject Matter Expert (SME) to lead the implementation, customization, and management of Identity and Access Management (IAM) solutions using Keycloak.

The ideal candidate will have 5+ years of experience in Keycloak or similar IAM solutions (e., Okta, ForgeRock, Auth0) and a strong background in authentication, authorization, and identity federation.

Key Responsibilities :

- Architect and implement Keycloak-based IAM solutions for secure authentication and authorization.

- Design and implement SSO (Single Sign-On) solutions across multiple applications and platforms.

- Enhance security by configuring multi-factor authentication (MFA), role-based access control (RBAC), and fine-grained authorization policies.

- Monitor, troubleshoot, and optimize Keycloak performance and security configurations.

- Develop and maintain documentation for IAM configurations, best practices, and security guidelines.

- Collaborate with DevOps teams to containerize and deploy Keycloak in cloud-native environments (AWS, Azure, GCP, Kubernetes).

- Stay updated on IAM trends and contribute to continuous improvements in authentication and security frameworks.

Required Skills & Qualifications :

- 5+ years of experience working with Keycloak or similar IAM tools (Okta, Auth0, ForgeRock, Ping Identity, etc.

- Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and LDAP/AD integration.

- Proficiency in Java, JavaScript, and REST API development for customizing Keycloak.

- Configuration of Keycloak realms, clients, users, roles, and authentication flows as required for the target applications.

- Configuration of Keycloak server settings, including caching, session management, and security hardening.

- Experience with RBAC, ABAC, fine-grained authorization policies, and multi-tenancy IAM implementations.

- Hands-on experience deploying Keycloak in containerized environments (Docker, Kubernetes) and cloud platforms (AWS, GCP, Azure).

- Knowledge of security best practices, encryption, and compliance requirements (GDPR, SOC2, HIPAA).

- Strong communication and documentation skills.