Senior IAM / IGA Operations Engineer - SFPD

Adjugo; Brussel Hoofdstad; Hybrid; EUR 140,000 - 175,000; Full time

Job summary

Adjugo is seeking a Senior IAM/IGA Operations Engineer to join our Brussels-based team. The role combines daily IAM/IGA operations, monitoring and incident resolution with full platform lifecycle management in a production environment using Keycloak for IAM and MidPoint for governance.

The assignment runs from 14 December 2026 to 13 December 2027 at Tour du Midi, Brussels, with hybrid work and partial teleworking. Daily rate: 760–950 EUR excl. VAT.

Qualifications

• Operational IAM/IGA experience.
• Expertise with Keycloak and/or MidPoint.
• Identity protocol knowledge (SAML, OIDC, OAuth2).
• Experience in provisioning integration.
• IAM security configurations.

Responsibilities

• Perform daily IAM/IGA operations and monitoring.
• Analyse logs from Keycloak, MidPoint, and infrastructure.
• Manage TLS/IdP certificates (SAML/OIDC) and databases.
• Support PostgreSQL and MariaDB in production.
• Lead upgrades, migrations and secure configurations.
• Automate workflows and document configurations for knowledge sharing.

Skills

IAM operations

Identity protocols

Provisioning

Security configurations

Automation

Tools

Keycloak

MidPoint

PostgreSQL

MariaDB

Job description

Senior IAM / IGA Operations Engineer - SFPD

Dates: 2026-12-14 — 2027-12-13

Arrangements: Full time; hybrid; partial teleworking possible; Brussels workplace.

SFPD is strengthening its Identity & Access Management team with a Senior IAM / IGA Operations Engineer. The team manages the availability and evolution of central identity platforms supporting authentication, authorization and identity lifecycle processes. The environment includes Keycloak for IAM and MidPoint for identity governance and administration. The consultant will work in a critical production environment with demanding stability, performance and security requirements.

The assignment combines daily operations, monitoring and incident resolution with full platform lifecycle management. Responsibilities include certificate and database support, root cause analysis, upgrades, migrations and secure configuration. The engineer will also integrate applications and target systems, manage provisioning flows and optimize joiner, mover and leaver processes. Automation, technical documentation, knowledge sharing and coaching are part of the work.

The mission runs full time from 14 December 2026 to 13 December 2027 at Tour du midi in Brussels, with partial teleworking possible. The daily rate is EUR 760–950 excluding VAT, with no broker fee and payment according to contract terms. Candidates need operational IAM/IGA experience, strong platform knowledge, technical troubleshooting skills and the stated interpersonal and language competencies. Selection includes CV screening, a shortlist of three to five candidates, an interview and a final ranking.

Top Reasons to Apply

• Critical security infrastructure
• Keycloak and MidPoint
• End-to-end platform ownership
• Automation and scripting
• Hybrid Brussels assignment

Responsibilities

• Perform daily IAM/IGA operations
• Monitor stacks and alerts
• Analyse Keycloak, MidPoint and infrastructure logs
• Manage TLS and IdP certificates (SAML / OIDC)
• Support PostgreSQL and MariaDB databases
• Improve platform stability and performance
• Resolve incidents and technical problems
• Conduct root cause analyses

Must Have

• Operational IAM/IGA experience
• Keycloak and/or MidPoint
• Identity protocol expertise
• Integration provisioning experience
• IAM security configurations

Nice to Have

• LDAP directory knowledge
• High availability architectures

Detailed Responsibilities and Skills

Additional Responsibilities

• Troubleshoot authentication, authorization and provisioning
• Restart and recover Keycloak / MidPoint platforms
• Identify IAM versus other-system causes and escalat
• Propose and implement structural solutions
• Manage full platform lifecycles
• Prepare and execute major upgrades and migrations
• Validate installations and configurations across environments
• Configure and maintain Keycloak / MidPoint
• Implement authentication flows, roles, policies and provisioning rules
• Detect and correct configuration security risksDefine and apply best practices
• Manage and optimize joiner / mover / leaver processes
• Manage roles and access models
• Onboard applications onto IAM platforms
• Integrate applications through OIDC / OAuth2 and SAML
• Integrate target systems (resources) and provisioning flows
• Design and implement installation, configuration and provisioning automation
• Use Groovy, Python and other scripting
• Optimize operational processes
• Create and maintain technical documentation
• Document configurations, processes and incidents
• Share knowledge and coach less experienced colleagues
• Collaborate with infrastructure teams (hosting, HA, security, performance), development teams (integrations, applications) and security stakeholders
• Act as domain technical contact
• Strong analytical and problem-solving ability.
• A proactive and results-oriented attitude.
• A sense of responsibility and ownership.
• A team player with a coaching mindset.
• Ability to work independently and make decisions.
• Active knowledge of the other national language; the portal separately lists Dutch and French at active-knowledge level.
• Very good English, specifically for technical communication and documentation; portal lists active knowledge.

Technical skills

• Demonstrable operational experience with IAM and/or IGA platforms.
• Strong knowledge of Keycloak and/or MidPoint; the description allows either platform.
• In-depth knowledge of IDC, OAuth2 and SAML. The source says 'IDC'; OIDC is stated in integration responsibilities, so the apparent discrepancy requires clarification.
• Experience with troubleshooting and root cause analysis.
• Experience with Linux environments.
• Experience with databases, specifically PostgreSQL and MariaDB.
• Experience with integrations and provisioning.
• Experience with security configurations within IAM.
• Experience with platform upgrades and migrations.
• Knowledge of LDAP / directory services.
• Knowledge of high-availability architectures.
• Experience in complex enterprise environments.

Portal role and skill levels — mandatory status not explicitly stated

• Expert IT Security Engineer; most recent experience: any time.
• Automation and technical environment: Junior; most recent experience: any time.
• IAM configuration and security: Expert; most recent experience: any time.
• Incident management and troubleshooting: Expert; most recent experience: any time.
• Integration and provisioning: Expert; most recent experience: any time.
• Keycloak: Confirmed; most recent experience: any time.
• Lifecycle management: Expert; most recent experience: any time.
• MidPoint: Junior; most recent experience: any time.
• Operational management of IAM/IGA platforms: Expert; most recent experience: any time.

Tools and platform context

• Keycloak: IAM authentication and authorization.
• MidPoint: IGA identity lifecycle management.
• PostgreSQL and MariaDB database support.
• TLS and IdP certificates for SAML / OIDC.
• LDAP / directory services are desirable.
• OIDC / OAuth2 and SAML application integration; technical requirements instead use 'IDC'.