Senior Software Developer (m/w/d) - Keycloak Identity & Access Management

Eventim USA Llc; Hamburg, Berlin, Bremen; Remote; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Vacation days

Workation days

Flexible hours

Ticket discounts

Bike leasing

Company pension

Mental health program

Language learning

Lunch & Learn

Job summary

Eventim USA Llc is seeking a Senior Software Developer to shape Identity & Access Management and API security across markets. You will develop on our central IAM platform using Keycloak, build extensions, and ensure secure authentication and scalable authorization for events products.

You will work from Hamburg, Bremen, or Berlin offices, collaborating with product teams, architects, and international EVENTIM entities. Strong Java and IAM background required with hands-on Keycloak experience.

Qualifications

• Several years of solid Java production experience.
• Strong IAM knowledge and security focus.
• Experience with Keycloak development and extensions.
• Understanding of OpenID Connect and OAuth 2.0 protocols.

Responsibilities

• Develop, configure, and operate IAM platform based on Keycloak.
• Extend and integrate Keycloak with products for international markets.
• Design secure authentication and authorization using OpenID Connect/OAuth 2.0.
• Develop and enhance API Gateway and API Management integration with identity services.
• Ensure platform reliability, scalability, and observability.

Skills

Java

IAM

Keycloak

OpenID Connect

OAuth 2.0

API Management

Kubernetes

German

English

Security

Tools

Kong/OpenResty

NGINX/OpenResty

Lua

Terraform

Grafana

Job description

Our **Auth API & API Management** team develops and operates central platform services that support EVENTIM's products across international markets. A key part of our work is our central **Identity & Access Management platform built on Keycloak**. It enables secure authentication and Single Sign-On across different products and markets, operating internationally and handling high traffic volumes. Closely connected to our identity platform are our **API Gateway and API Management solutions**, which ensure that APIs are exposed securely and reliably. Both areas are tightly integrated, particularly when it comes to authentication, authorization, and API security. As a Senior Software Developer, you will work alongside your team to continuously develop and enhance these platforms, shaping essential solutions around **Identity & Access Management, Authentication, and Security**. You can work from one of our offices in **Hamburg, Bremen, or Berlin**. We look forward to receiving your application! **Key Responsibilities:*** **Identity & Access Management:** Develop, configure, and operate our central Identity & Access Management platform based on **Keycloak**, together with your team.* **Keycloak Development:** Build extensions and integrations for Keycloak, adapting the platform to the requirements of our products and international markets.* **Authentication & Authorization:** Design secure and scalable solutions using **OpenID Connect, OAuth 2.0, Single Sign-On, and Identity Federation**.* **API Management:** Further develop our API Gateway and API Management solutions and integrate them with our identity platform, particularly regarding API security, token validation, and access control.* **Platform Reliability:** Take ownership of the **stability, scalability, security, and observability** of our identity platform in production.* **Troubleshooting:** Analyze technical issues and contribute to sustainable solutions for incidents and performance challenges.* **Stakeholder Collaboration:** Work directly with internal customers, product teams, and international EVENTIM entities to understand requirements and develop suitable technical solutions.* **Technical Architecture:** Actively contribute your expertise to architecture decisions, technical concepts, and reviews.* **Knowledge Sharing:** Support fellow developers through knowledge sharing, code reviews, and technical guidance. **What you'll need**:* **Several years of solid experience in Java software development**, including working with large-scale, business-critical production systems.* Practical experience with **Identity & Access Management (IAM)** and a strong understanding of the technical and security challenges of modern authentication systems.* Ideally, extensive hands-on experience with **Keycloak**, including its architecture, configuration, and particularly its customization and extension capabilities.* A solid understanding of **OpenID Connect and OAuth 2.0**, including the underlying authentication flows, tokens, and security concepts.* Experience with **API Management and API Gateways**, including their integration with modern authentication and authorization solutions.* Hands-on experience **operating distributed applications** in clustered or cloud environments, with a strong interest in scalability, performance, and observability.* A strong interest in **Application Security and Identity Security**, with a security-first mindset throughout design and implementation.* The ability to explain complex technical concepts clearly and collaborate effectively with developers, architects, product teams, and international stakeholders.* **Very good German and good English language skills** complete your profile. **Nice to have:*** Experience with **Keycloak customization, SPIs, and extensions*** Experience with **Quarkus*** Hands-on experience with **API Gateway technologies**, ideally OpenResty-based solutions such as **Kong or Apache APISIX*** Knowledge of **NGINX, OpenResty, or Lua** for configuring and extending API Gateways* Experience with **Kubernetes and container technologies*** Experience with **Terraform/Terragrunt and Infrastructure as Code (IaC)*** Experience with **monitoring and observability tools**, such as Grafana Cloud* Experience with automated **integration and end-to-end testing*** Experience with cloud platforms such as **AWS, Google Cloud, or Azure*** Familiarity with **agile software development methodologies** **Benefits*** 30 days of paid vacation plus the option of up to 15 days of unpaid leave* 25 days of workation within the EU* Flexible working hours* Sofa Concerts and employee events* Discounts on ticket purchases & opportunities for clearing assignments* Corporate benefits and discounts at KESS* Central location & subsidy for a Job Ticket or Germany Ticket* Bike leasing* Mental health program & company pension scheme* “GoFluent” language learning platform as well as Lunch & Learn sessions