Senior Keycloak Architect & IAM Security Lead

InnovationTeam; Riyadh; On-site; SAR 350,000 - 550,000; Full time

Job summary

InnovationTeam is seeking an experienced Senior Keycloak Administrator to lead the design, implementation, and ongoing management of our IAM infrastructure using Keycloak. You will ensure secure authentication and authorization for enterprise apps, optimize performance, and collaborate with cross-functional teams to integrate Keycloak with cloud and on‑prem environments.

The ideal candidate has 5+ years in IAM, at least 3 years focusing on Keycloak, and strong knowledge of OAuth2, OIDC, and

Qualifications

• 5+ years in IAM administration, with at least 3 years focused on Keycloak.
• Expert‑level proficiency in Keycloak features (realms, clients, roles, users, events, and Admin REST API).
• Strong knowledge of identity protocols (OAuth2, OIDC, SAML, JWT) and related tools (LDAP, Kerberos).
• Experience with containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure).
• Familiarity with databases (PostgreSQL, MySQL) for Keycloak persistence and monitoring tools (Prometheus, Grafana).

Responsibilities

• Install, configure, and maintain Keycloak servers, including realm management and user federation.
• Design and deploy secure authentication/authorization solutions using Keycloak; integrate with applications and APIs.
• Manage Keycloak clustering, high‑availability setups, performance tuning, and monitoring; handle upgrades and backups.
• Implement RBAC, fine‑grained permissions, and security practices; conduct security audits and ensure compliance.
• Troubleshoot authentication failures, token issues, and integration problems; optimize for cloud or hybrid environments.
• Collaborate with DevOps and security teams; maintain comprehensive configuration and troubleshooting documentation.
• Develop and maintain custom Keycloak extensions, providers, or scripts as needed.

Skills

Keycloak administration

OAuth/OIDC/SAML

LDAP/Kerberos

Docker/Kubernetes

AWS/Azure

RBAC/Security

Tools

Docker

Kubernetes

LDAP

Kerberos

PostgreSQL

MySQL

Prometheus

Grafana

Job description

InnovationTeam is seeking an experienced Senior Keycloak Administrator to lead the design, implementation, and ongoing management of our IAM infrastructure using Keycloak. You will ensure secure authentication and authorization for enterprise apps, optimize performance, and collaborate with cross-functional teams to integrate Keycloak with cloud and on‑prem environments.

The ideal candidate has 5+ years in IAM, at least 3 years focusing on Keycloak, and strong knowledge of OAuth2, OIDC, and