IAM Developer

Luxoft; Madrid; Presencial; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

A leading IT consulting company based in Madrid is looking for a specialized IAM Developer to design and implement identity and access management infrastructure using Keycloak. Responsibilities include securing microservices and developing custom solutions to ensure enterprise security. The ideal candidate should have deep knowledge of OIDC, OAuth 2.0, SAML, and extensive experience in deploying Keycloak within Docker or Kubernetes environments. Hybrid working models may be offered depending on the candidate's situation.

Formación

• Proven experience in managing Realms and Client configurations in Keycloak.
• Deep knowledge of OIDC, OAuth 2.0, and SAML protocols.
• Hands-on experience in developing custom Keycloak extensions using Java.

Responsabilidades

• Design and implement secure authentication and authorization workflows.
• Develop and debug custom Java SPIs to meet unique business requirements.
• Integrate and troubleshoot client applications with Keycloak.

Conocimientos

Keycloak Core Configuration

OIDC (OpenID Connect)

OAuth 2.0

SAML 2.0

Custom Java Extensions

Spring Boot

Node.js

Docker

Kubernetes

LDAP/Active Directory

Herramientas

Terraform

Ansible

Descripción del empleo

Project description

We are seeking a specialized IAM Developer to design, implement, and customize our identity and access management infrastructure using Keycloak. You will be responsible for securing microservices, managing complex authentication flows, and extending Keycloak via custom SPIs to meet enterprise security requirements.

Responsibilities

• Design and implement secure authentication and authorization workflows using OIDC, OAuth 2.0, and SAML protocols.
• Develop and debug custom Java SPIs to extend Keycloak functionality for unique business requirements and logging.
• Integrate and troubleshoot client applications and microservices with Keycloak to resolve token, session, or login issues.
• Configure and maintain user federation with LDAP/AD and identity brokering with external providers for seamless profile synchronization.
• Deploy and optimize Keycloak clusters on Docker or Kubernetes, ensuring high availability, security patching, and performance tuning.

Skills

Must have

• Keycloak Core Configuration: Proven experience in managing Realms, Clients (Confidential/Public), Roles (Realm vs. Client), and Groups.
• Protocol Expertise: Deep technical knowledge of OIDC (OpenID Connect), OAuth 2.0, and SAML 2.0.
• Custom Extensions (SPIs): Hands-on experience developing custom Keycloak extensions using Java. This includes Custom User Storage Providers, Custom Authenticators, or Protocol Mappers.
• Integration & Security: Experience integrating Keycloak with Spring Boot or Node.js and securing REST APIs using JWT (JSON Web Tokens).
• Identity Federation: Experience configuring User Federation with LDAP/Active Directory and Social Login providers.
• Deployment & DevOps: Practical experience deploying Keycloak in containerized environments (Docker/Kubernetes) and managing high-availability (HA) clusters.

Nice to have

• Experience with FreeMarker templates (.ftl) for custom UI/Theme development.
• Knowledge of Fine-Grained Authorization Services (Authz).
• Familiarity with automation tools like Terraform or Ansible for IAM.