Senior Software Developer (m/f/d) - Keycloak Identity & Access Management

EVENTIM Tech GmbH; Deutschland; On-site; EUR 80,000 - 110,000; Full time

Benefits offered by this job

30 days vacation

Flexible working hours

Sofa Concerts and employee events

Discounts on ticket purchases

GoFluent language learning platform

Job summary

EVENTIM Tech GmbH invites a Senior Software Developer to join the Auth API & API Management team. You will help build and operate a central Identity & Access Management platform based on Keycloak, and you will develop extensions to fit our products across international markets.

You will design secure authentication and authorization flows, integrate API management with the identity layer, and help ensure platform reliability, scalability, and observability in production.

Qualifications

• Several years of solid experience in Java software development for large-scale production systems.
• Practical experience with Identity & Access Management (IAM) and understanding of authentication security challenges.
• Extensive hands-on experience with Keycloak, including customization and extensions.

Responsibilities

• Develop and operate central Identity & Access Management platform based on Keycloak.
• Develop integrations and extensions for Keycloak to fit products and international markets.
• Design secure authentication and authorization using OpenID Connect and OAuth 2.0.

Skills

Java development

IAM

Keycloak

OIDC & OAuth2

API Gateway

Distributed systems

Kubernetes

Tools

Keycloak

API Gateway

NGINX/OpenResty

Job description

Our Auth API & API Management team develops and operates central platform services that support EVENTIM's products across international markets.

A key part of our work is our central Identity & Access Management platform built on Keycloak. It enables secure authentication and Single Sign-On across different products and markets, operating internationally and handling high traffic volumes.

Closely connected to our identity platform are our API Gateway and API Management solutions, which ensure that APIs are exposed securely and reliably. Both areas are tightly integrated, particularly when it comes to authentication, authorization, and API security.

As a Senior Software Developer, you will work alongside your team to continuously develop and enhance these platforms, shaping essential solutions around Identity & Access Management, Authentication, and Security.

You can work from one of our offices in Hamburg, Bremen, or Berlin.

Key Responsibilities

• Identity & Access Management: Develop, configure, and operate our central Identity & Access Management platform based on Keycloak, together with your team.
• Keycloak Development: Build extensions and integrations for Keycloak, adapting the platform to the requirements of our products and international markets.
• Authentication & Authorization: Design secure and scalable solutions using OpenID Connect, OAuth 2.0, Single Sign-On, and Identity Federation.
• API Management: Further develop our API Gateway and API Management solutions and integrate them with our identity platform, particularly regarding API security, token validation, and access control.
• Platform Reliability: Take ownership of the stability, scalability, security, and observability of our identity platform in production.
• Troubleshooting: Analyze technical issues and contribute to sustainable solutions for incidents and performance challenges.
• Stakeholder Collaboration: Work directly with internal customers, product teams, and international EVENTIM entities to understand requirements and develop suitable technical solutions.
• Technical Architecture: Actively contribute your expertise to architecture decisions, technical concepts, and reviews.
• Knowledge Sharing: Support fellow developers through knowledge sharing, code reviews, and technical guidance.

What you'll need

• Several years of solid experience in Java software development, including working with large-scale, business-critical production systems.
• Practical experience with Identity & Access Management (IAM) and a strong understanding of the technical and security challenges of modern authentication systems.
• Ideally, extensive hands-on experience with Keycloak, including its architecture, configuration, and particularly its customization and extension capabilities.
• A solid understanding of OpenID Connect and OAuth 2.0, including the underlying authentication flows, tokens, and security concepts.
• Experience with API Management and API Gateways, including their integration with modern authentication and authorization solutions.
• Hands-on experience operating distributed applications in clustered or cloud environments, with a strong interest in scalability, performance, and observability.
• A strong interest in Application Security and Identity Security, with a security-first mindset throughout design and implementation.
• The ability to explain complex technical concepts clearly and collaborate effectively with developers, architects, product teams, and international stakeholders.
• Very good German and good English language skills complete your profile.

Nice to have

• Experience with Keycloak customization, SPIs, and extensions
• Experience with Quarkus
• Hands-on experience with API Gateway technologies, ideally OpenResty-based solutions such as Kong or Apache APISIX
• Knowledge of NGINX, OpenResty, or Lua for configuring and extending API Gateways
• Experience with Kubernetes and container technologies
• Experience with Terraform/Terragrunt and Infrastructure as Code (IaC)
• Experience with monitoring and observability tools, such as Grafana Cloud
• Experience with automated integration and end-to-end testing
• Experience with cloud platforms such as AWS, Google Cloud, or Azure
• Familiarity with agile software development methodologies

Benefits

• 30 days of paid vacation plus the option of up to 15 days of unpaid leave
• 25 days of workation within the EU
• Flexible working hours
• Sofa Concerts and employee events
• Discounts on ticket purchases & opportunities for clearing assignments
• Corporate benefits and discounts at KESS Central location & subsidy for a Job Ticket or Germany Ticket Bike leasing
• Mental health program & company pension scheme
• “GoFluent” language learning platform as well as Lunch & Learn sessions
• 30 days of paid vacation plus the option of up to 15 days of unpaid leave
• 25 days of workation within the EU
• Flexible working hours
• Sofa Concerts and employee events
• Discounts on ticket purchases
• Corporate benefits and discounts at KESS Central location & subsidy for a Job Ticket or Germany Ticket Bike leasing
• Mental health program & company pension scheme
• “GoFluent” language learning platform as well as Lunch & Learn sessions

We value diversity and treat all applications equally – regardless of gender, background, age, religion, disability, or sexual orientation.

Different perspectives enrich our team and make EVENTIM stronger.

As Europe's number one in ticketing and live entertainment and number two worldwide, we are active in over 25 countries. Among other things, we develop software and e-commerce platforms that form the basis for the commercial success of many event organisers and artists. At the same time, we provide millions of fans around the world with unforgettable experiences. In the ticketing segment, our e-commerce and tech teams bring decades of experience, technical expertise and comprehensive know-how in software development, data science, product management and quality assurance, as well as agile working methods.