Your Profile

We are looking for an experienced IAM DevOps Engineer with strong Kubernetes operations background, solid understanding of OAuth 2.0 and OpenID Connect concepts, and hands-on experience with Keycloak/RHSSO for managing identity and access management capabilities.

Must Have Skills

At least 3 years of work experience as DevOps / Platform Engineer (or SRE) with hands-on Kubernetes operations in production environments
Solid understanding of OAuth 2.0 and OpenID Connect concepts for modern IAM integrations and SSO flows
Practical experience with GitOps delivery using Argo CD (Git-driven continuous delivery for Kubernetes)
Experience working with containers (Docker) and CI/CD pipelines (e.g. GitLab) from commit to production
Comfortable scripting in Python and Bash for automation and troubleshooting tasks
IAM fundamentals knowledge: authentication vs authorization, identity lifecycle and provisioning flows, role/permission model design, user types, and machine-to-machine concepts
Hands-on experience with Keycloak/RHSSO: realms, clients, roles, scopes, identity providers, and themes, including troubleshooting authentication and authorization flows end-to-end
Configuration-as-code mindset for Keycloak: managing realms/clients/roles via versioned configuration and promoting changes across environments
Ability to diagnose and resolve platform issues (CPU/memory pressure, pod health, configuration errors), contribute to incident response, and support upgrades and migrations
Kubernetes & networking experience with deployments, services, ingress, environment-specific configuration, and secure handling of secrets/config maps
Experience with Helm charts and Argo CD application management, including using Helm-based deployments through Argo CD for GitOps workflows
Experience in CI/CD using GitLab, including building, testing, and deploying containerized workloads
Infrastructure as Code (IaC) approach for managing environments and application infrastructure
Experience with Grafana/Prometheus, ELK stack, and basic Dynatrace usage for monitoring, alerting, and troubleshooting
Experience with PostgreSQL in operational contexts (backups and restore, basic performance indicators, connection troubleshooting)
General understanding of how Keycloak and IAM components rely on Postgres and what typical failure modes look like
Experience with OAuth 2.0, OpenID Connect, and JWT-based authentication for Keycloak integrations
Understanding of TLS/certificates and secure exposure of IAM endpoints
Experience using monitoring and load-testing tools (e.g. Prometheus/Grafana, JMeter) to observe performance, capacity, and stability of IAM services

Nice to Have Skills

Hands-on experience running Keycloak using an operator-based approach on Kubernetes/OpenShift
Deeper Postgres operational know-how (performance tuning, HA setups, maintenance strategies)
Experience in cloud technologies (AWS, Azure, or Google Cloud)
Experience in Go, Java and/or Quarkus for maintaining operators, provisioning logic, or SPI-based extensions
Experience of working in international projects
Degree in Computer Science, Mathematics or Engineering