AWS Identity & Keycloak Security Architect (On-Site, PT)

VSO Inc.; Washington (District of Columbia); On-site; USD 96,000 - 138,000; Part time

Benefits offered by this job

Health benefits

Flexible work arrangements

Competitive salary

Job summary

VSO Inc. seeks an experienced AWS Authentication SME (Keycloak) to own secure identity infrastructure on a focused, part-time engagement.

Design PKI-based authentication and certificate-driven access for enterprise services, within a highly controlled environment and on-site facilities. You will configure Keycloak federation, integrate applications using SAML and OIDC, and troubleshoot trust and identity flows with senior partners.

Qualifications

• Deep hands-on experience administering and integrating Keycloak.
• Practical expertise in PKI, certificate lifecycle management, and CAC/smart-card authentication.
• Strong experience with SAML and OIDC federation flows.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Responsibilities

• Design and implement PKI and certificate-based authentication solutions.
• Configure and maintain Keycloak identity federation and synchronization.
• Integrate applications and services using SAML, OpenID Connect, and related standards.
• Troubleshoot identity flows, trust relationships, and secure service access.

Skills

Keycloak

PKI

Certificate lifecycle management

CAC/smart-card authentication

SAML

OIDC

AWS

Tools

Keycloak

Job description

VSO Inc. seeks an experienced AWS Authentication SME (Keycloak) to own secure identity infrastructure on a focused, part-time engagement.

Design PKI-based authentication and certificate-driven access for enterprise services, within a highly controlled environment and on-site facilities. You will configure Keycloak federation, integrate applications using SAML and OIDC, and troubleshoot trust and identity flows with senior partners.