IAM Developer

Luxoft; Barcelona; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

An innovative tech firm is seeking a specialized IAM Developer in Barcelona. You will design, implement, and customize the identity and access management infrastructure using Keycloak. This role requires expertise in secure authentication protocols like OIDC and OAuth 2.0, developing custom extensions, and integrating with microservices. Ideal candidates will have experience in deploying Keycloak within Docker or Kubernetes environments and managing user federation with LDAP. Competitive salary and dynamic work environment offered.

Formación

• Proven experience in managing Realms, Clients, Roles, and Groups within Keycloak.
• Deep technical knowledge of OIDC, OAuth 2.0, and SAML 2.0 protocols.
• Hands-on experience developing custom Keycloak extensions using Java.
• Experience integrating Keycloak with Spring Boot or Node.js and securing REST APIs.
• Experience configuring User Federation with LDAP and Social Login providers.
• Practical experience deploying Keycloak in Docker and Kubernetes.

Responsabilidades

• Design and implement secure authentication workflows using OIDC and OAuth 2.0.
• Develop and debug Java SPIs to enhance Keycloak functionality.
• Integrate client applications with Keycloak to resolve issues.
• Configure user federation with LDAP/AD for profile synchronization.
• Deploy Keycloak clusters on Docker or Kubernetes for high availability.

Conocimientos

Keycloak Core Configuration

OIDC (OpenID Connect)

OAuth 2.0

SAML 2.0

Java

Spring Boot

Node.js

JWT (JSON Web Tokens)

LDAP/Active Directory

Docker

Kubernetes

Descripción del empleo

Project description

We are seeking a specialized IAM Developer to design, implement, and customize our identity and access management infrastructure using Keycloak. You will be responsible for securing microservices, managing complex authentication flows, and extending Keycloak via custom SPIs to meet enterprise security requirements.

Responsibilities

• Design and implement secure authentication and authorization workflows using OIDC, OAuth 2.0, and SAML protocols.
• Develop and debug custom Java SPIs to extend Keycloak functionality for unique business requirements and logging.
• Integrate and troubleshoot client applications and microservices with Keycloak to resolve token, session, or login issues.
• Configure and maintain user federation with LDAP/AD and identity brokering with external providers for seamless profile synchronization.
• Deploy and optimize Keycloak clusters on Docker or Kubernetes, ensuring high availability, security patching, and performance tuning.

SKILLS

Must have

• Keycloak Core Configuration: Proven experience in managing Realms, Clients (Confidential/Public), Roles (Realm vs. Client), and Groups.
• Protocol Expertise: Deep technical knowledge of OIDC (OpenID Connect), OAuth 2.0, and SAML 2.0.
• Custom Extensions (SPIs): Hands‑on experience developing custom Keycloak extensions using Java. This includes Custom User Storage Providers, Custom Authenticators, or Protocol Mappers.
• Integration & Security: Experience integrating Keycloak with Spring Boot or Node.js and securing REST APIs using JWT (JSON Web Tokens).
• Identity Federation: Experience configuring User Federation with LDAP/Active Directory and Social Login providers.
• Deployment & DevOps: Practical experience deploying Keycloak in containerized environments (Docker/Kubernetes) and managing high-availability (HA) clusters.

Nice to have

• Experience with FreeMarker templates (.ftl) for custom UI/Theme development.
• Knowledge of Fine‑Grained Authorization Services (Authz).
• Familiarity with automation tools like Terraform or Ansible for IAM.