Senior SRE / Platform Engineer (Keycloak and Identity Management)

Workload: Full-time
Duration: Long-term
Location: Europe (Remote)
English: Upper-Intermediate+ (B2+)

Project

We are looking for an experienced Senior SRE / Platform Engineer to join a global Identity & Access Management initiative.

The team is currently using Microsoft Azure AD (Entra ID) as the primary Identity Provider and is migrating to Keycloak. You will be responsible for designing, implementing, and operating a highly available authentication platform while ensuring reliability, scalability, and security across enterprise applications.

You will collaborate closely with platform engineers, backend developers, security engineers, and architects to deliver a production-grade Identity Platform.

Responsibilities

• Participate in the migration from Azure AD (Entra ID) to Keycloak
• Deploy, configure, maintain, and optimize Keycloak clusters
• Design and operate highly available Identity Platform infrastructure
• Configure and troubleshoot authentication flows using OIDC, OAuth2, and SAML 2.0
• Integrate enterprise applications with Keycloak
• Maintain Kubernetes-based deployments of IAM services
• Build and improve CI/CD pipelines for platform components
• Monitor system reliability, performance, and security
• Implement observability, alerting, and incident response processes
• Collaborate with development teams on authentication and authorization integration
• Participate in production support and incident resolution

Requirements

• 5+ years of experience as an SRE, Platform Engineer, DevOps Engineer, or Infrastructure Engineer
• Strong production experience with Kubernetes
• Hands-on experience with Keycloak
• Experience with Identity & Access Management (IAM)
• Strong knowledge of:
  • OpenID Connect (OIDC)
  • OAuth2
  • SAML 2.0
• Experience integrating enterprise applications with Identity Providers
• Experience with Azure AD / Microsoft Entra ID
• Experience with infrastructure automation and CI/CD
• Good understanding of Linux and networking fundamentals
• Experience troubleshooting authentication and authorization issues
• Experience with TypeScript
• Fluent written and spoken English

Nice to Have

• Experience migrating between Identity Providers
• Experience with Okta, Auth0, Ping Identity, or ForgeRock
• Helm and Kubernetes Operators
• Terraform
• Prometheus, Grafana, Loki
• HashiCorp Vault
• GitOps (ArgoCD, Flux)
• Cloud platforms (Azure, AWS, or GCP)
• Experience working in enterprise environments

Tech Stack

• Keycloak
• Azure AD (Microsoft Entra ID)
• Kubernetes
• TypeScript
• OIDC
• OAuth2
• SAML 2.0
• Terraform
• Helm
• Docker
• GitHub / Azure DevOps
• Prometheus
• Grafana

We Offer

• Long-term international project
• Fully remote work
• Modern cloud-native infrastructure
• Opportunity to work on a large-scale enterprise Identity Platform
• Collaborative international engineering team
• Competitive compensation based on experie