Senior Keycloak Administrator

Job description

We are seeking a Senior Keycloak Administrator to lead the design, implementation, and ongoing management of our identity and access management (IAM) infrastructure using Keycloak. In this role you will ensure secure authentication and authorization for enterprise applications, optimize system performance, and collaborate with cross‑functional teams to integrate Keycloak with cloud and on‑premises environments. Responsibilities include installing, configuring, and maintaining Keycloak servers, managing realms and LDAP/AD federation, developing custom UI themes, designing authentication/authorization solutions, managing high‑availability clustering, performance tuning, upgrades, backups, implementing RBAC and fine‑grained policies, conducting security audits, diagnosing and resolving authentication and token issues, optimizing scalability in cloud or hybrid settings, working with development, DevOps, and security teams, maintaining comprehensive documentation, and developing custom extensions using Java or REST APIs

Requirements

• 5+ years experience in IAM administration
• at least 3 years focused on Keycloak
• expert‑level proficiency in Keycloak features (realms, clients, roles, users, events, Admin REST API)
• strong knowledge of identity protocols (OAuth2, OIDC, SAML, JWT) and tools (LDAP, Kerberos)
• experience with containerization (Docker, Kubernetes)
• proficiency with cloud platforms (AWS, Azure)
• familiarity with databases (PostgreSQL, MySQL) and monitoring tools (Prometheus, Grafana)

Skills