DevOps Engineer IDP/Keycloak SME - LS Technologies, LLC

OpenTalent; United States; On-site; USD 130,000 - 150,000; Full time

Job summary

The Federal Aviation Administration (FAA) is seeking a System Engineer to lead Identity and Access Management, focusing on Keycloak and Login.gov integrations for FAA cloud applications. The role requires deep IAM expertise, hands-on design, deployment, and cross-team collaboration to ensure secure, scalable authentication across environments.

You will implement secure authentication patterns (OAuth 2.0, OIDC, SAML 2.0, JWT), configure federations, and support SSO and federation with LDAP/AD and

Qualifications

• Requires advanced expertise in identity and access management (IAM).
• Experience with enterprise IAM solutions and IdP integrations.
• Strong collaboration with security teams and developers.

Responsibilities

• Serve as SME for Keycloak, IdP, IAM, and Login.gov solutions supporting FAA cloud apps and services.
• Design, deploy, configure, upgrade, and maintain Keycloak environments across development, test, staging, and production.
• Configure realms, clients, roles, groups, users, service accounts, identity providers, authentication flows, and authorization policies.
• Implement and support OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT-based authentication.
• Design and implement secure integrations between FAA apps and Login.gov for authentication and identity verification use cases.
• Support applications integrating with Login.gov using OpenID Connect/OAuth 2.0 patterns.
• Configure and troubleshoot Login.gov identity provider integrations, including client registration, redirect/return URLs, scopes, claims, authentication flows, and token handling.
• Support integration between Login.gov, Keycloak, and FAA applications where federated identity or identity brokering is required.
• Troubleshoot authentication issues involving Login.gov, Keycloak, application clients, tokens, claims, certificates, redirects, and federation.
• Apply Login.gov integration and security requirements to application onboarding and deployment activities.
• Support testing and validation of Login.gov integrations across development, test, staging, and production environments.
• Coordinate with application teams and identity/security stakeholders to resolve Login.gov integration issues and ensure proper authentication flows.
• Implement and support Single Sign-On (SSO) capabilities across cloud applications and enterprise services.
• Support federation with enterprise directories and identity services, including LDAP/Active Directory and other authoritative identity sources.

Skills

System engineering

IAM

Cloud IAM

Problem solving

Cross-team collaboration

Tools

Keycloak

Login.gov

OAuth 2.0

OIDC

SAML 2.0

JWT

LDAP/AD

Job description

Job Description The Federal Aviation Administration (FAA) is seeking a highly skilled System Engineer to serve as an Identity Provider (IDP) Subject Matter Expert (SME) by providing advanced engineering, implementation, integration, and operational support for enterprise identity and access management (IAM) services. The engineer will serve as a subject matter expert for Keycloak, IDP technologies, and Login.gov integrations, helping design, deploy, secure, automate, and maintain identity services supporting cloud-hosted applications and platforms.

Salary is based on relative years of experience: $130,000 - $150,000

Job Duties & Responsibilities - Essential Job Functions may include (but are not limited to) the following: The following duties are considered essential to the role. Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions

• Serve as a technical SME for Keycloak, Identity Provider (IdP), IAM, and Login.gov solutions supporting FAA cloud applications and services.
• Design, deploy, configure, upgrade, and maintain Keycloak environments across development, test, staging, and production environments.
• Configure and manage Keycloak realms, clients, roles, groups, users, service accounts, identity providers, authentication flows, and authorization policies.
• Implement and support OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT-based authentication.
• Design and implement secure integrations between FAA applications and Login.gov for authentication and identity verification use cases.
• Support applications integrating with Login.gov using OpenID Connect/OAuth 2.0 patterns.
• Configure and troubleshoot Login.gov identity provider integrations, including client registration, redirect/return URLs, scopes, claims, authentication flows, and token handling.
• Support integration between Login.gov, Keycloak, and FAA applications where federated identity or identity brokering is required.
• Troubleshoot authentication issues involving Login.gov, Keycloak, application clients, tokens, claims, certificates, redirects, and federation.
• Apply Login.gov integration and security requirements to application onboarding and deployment activities.
• Support testing and validation of Login.gov integrations across development, test, staging, and production environments.
• Coordinate with application teams and identity/security stakeholders to resolve Login.gov integration issues and ensure proper authentication flows.
• Implement and support Single Sign-On (SSO) capabilities across cloud applications and enterprise services.
• Support federation with enterprise directories and identity services, including LDAP/Active Directory and other authoritative identity sources.