Senior Keycloak Administrator

InnovationTeam; Riyadh; On-site; SAR 350,000 - 550,000; Full time

Job summary

InnovationTeam is seeking an experienced Senior Keycloak Administrator to lead the design, implementation, and ongoing management of our IAM infrastructure using Keycloak. You will ensure secure authentication and authorization for enterprise apps, optimize performance, and collaborate with cross-functional teams to integrate Keycloak with cloud and on‑prem environments.

The ideal candidate has 5+ years in IAM, at least 3 years focusing on Keycloak, and strong knowledge of OAuth2, OIDC, and

Qualifications

• 5+ years in IAM administration, with at least 3 years focused on Keycloak.
• Expert‑level proficiency in Keycloak features (realms, clients, roles, users, events, and Admin REST API).
• Strong knowledge of identity protocols (OAuth2, OIDC, SAML, JWT) and related tools (LDAP, Kerberos).
• Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure).
• Familiarity with databases (PostgreSQL, MySQL) for Keycloak persistence and monitoring tools (Prometheus, Grafana).

Responsibilities

• Install, configure, and maintain Keycloak servers, including realm management and user federation.
• Design and deploy secure authentication/authorization solutions using Keycloak; integrate with applications and APIs.
• Manage Keycloak clustering, high‑availability setups, performance tuning, and monitoring; handle upgrades and backups.
• Implement RBAC, fine‑grained permissions, and security practices; conduct security audits and ensure compliance.
• Troubleshoot authentication failures, token issues, and integration problems; optimize for cloud or hybrid environments.
• Collaborate with DevOps and security teams; maintain comprehensive configuration and troubleshooting documentation.
• Develop and maintain custom Keycloak extensions, providers, or scripts as needed.

Skills

Keycloak administration

OAuth/OIDC/SAML

LDAP/Kerberos

Docker/Kubernetes

AWS/Azure

RBAC/Security

Tools

Docker

Kubernetes

LDAP

Kerberos

PostgreSQL

MySQL

Prometheus

Grafana

Job description

We are seeking an experienced Senior Keycloak Administrator to lead the design, implementation, and ongoing management of our identity and access management (IAM) infrastructure using Keycloak. In this role, you will ensure secure authentication and authorization for enterprise applications, optimize system performance, and collaborate with cross-functional teams to integrate Keycloak with cloud and on-premises environments. The ideal candidate has deep expertise in Keycloak administration, a strong understanding of security protocols like OAuth2, OIDC, and SAML, and the ability to troubleshoot complex issues in high‑availability setups.

Requirements

• 5+ years in IAM administration, with at least 3 years focused on Keycloak; proven track record in enterprise deployments.
• Expert‑level proficiency in Keycloak features (realms, clients, roles, users, events, and Admin REST API).
• Strong knowledge of identity protocols (OAuth2, OIDC, SAML, JWT) and related tools (e.g., LDAP, Kerberos).
• Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure).
• Familiarity with databases (PostgreSQL, MySQL) for Keycloak persistence and monitoring tools (Prometheus, Grafana).

Key Responsibilities

• Keycloak Administration and Configuration: Install, configure, and maintain Keycloak servers, including realm management, user federation (e.g., LDAP/AD integration), and custom theme/UI development for login, registration, and admin consoles.
• IAM Solution Design and Implementation: Design and deploy secure authentication/authorization solutions using Keycloak, supporting protocols such as OIDC, OAuth2, and SAML; integrate with internal/external applications, APIs, and third‑party services for identity federation.
• Infrastructure Management: Manage Keycloak clustering, high‑availability setups, performance tuning, and monitoring; handle upgrades, backups, and disaster recovery to ensure 99.9% uptime.
• Security and Compliance: Implement role-based access control (RBAC), fine‑grained permissions, and policies; conduct security audits, vulnerability assessments, and ensure compliance with standards like GDPR, HIPAA, or SOC 2.
• Troubleshooting and Optimization: Diagnose and resolve incidents related to authentication failures, token issues, or integration problems; optimize Keycloak for scalability in cloud (e.g., AWS, Azure) or hybrid environments.
• Collaboration and Documentation: Work with development, DevOps, and security teams to provide guidance on best practices; maintain comprehensive documentation for configurations, processes, and troubleshooting guides.
• Custom Development (as needed): Develop and maintain custom Keycloak extensions, providers, or scripts using Java or REST APIs for tailored functionality.