AWS Identity & PKI Architect (Keycloak) – On-Site

VSO Inc.; Herndon (VA); On-site; USD 83,000 - 152,000; Part time

Job summary

VSO Inc. seeks an experienced AWS Authentication SME (Keycloak) to join a skilled team for a mission-critical, security-sensitive initiative.

This part-time on-site role focuses on secure identity infrastructure, certificate-based access, and enterprise service interoperability within a controlled environment. You will design robust authentication patterns, configure Keycloak federation, and integrate SAML/OIDC with applications.

Qualifications

• Active TS/SCI clearance; eligible for SCI read-on/indoctrination and program access approvals.
• Must reside within commuting distance of approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• On-site presence required; this is not a remote position.
• Part-time on-site engagement.
• U.S. citizenship status required by government contract.

Responsibilities

• Design and implement PKI and certificate-based authentication solutions.
• Configure and maintain Keycloak identity federation and synchronization.
• Integrate applications and services using SAML, OpenID Connect, and related standards.
• Troubleshoot identity flows, trust relationships, and secure service access.

Skills

Communication

Independent work

Problem solving

Team collaboration

Tools

Keycloak

PKI

CAC/smart-card

SAML

OIDC

AWS

Job description

VSO Inc. seeks an experienced AWS Authentication SME (Keycloak) to join a skilled team for a mission-critical, security-sensitive initiative.

This part-time on-site role focuses on secure identity infrastructure, certificate-based access, and enterprise service interoperability within a controlled environment. You will design robust authentication patterns, configure Keycloak federation, and integrate SAML/OIDC with applications.