IT Keycloak Specialist

IT SECURITY IAM KEYCLOAK LINUX DOCKER On behalf of our client in the public sector in Brussels, we are seeking an experienced Security Engineer specialized in Keycloak to support the launch of an IAM project aimed at implementing an Identity & Access Management solution to strengthen information system security and meet regulatory requirements, particularly the European NIS2 directive. The purpose of your mission is to contribute to the secure, consistent, and compliant implementation of the IAM solution by ensuring the administration, configuration, technical monitoring, and security of components related to authentication, authorization, and identity management, and by supporting the project team in developing skills, governance, and long-term sustainability of the solution. You will be responsible for: Managing Keycloak administration: installing, configuring, and maintaining the platform; managing clients, identities, roles, access, and external identity providers; applying security policies; and ensuring proper monitoring and logging. Providing Keycloak expertise: reviewing architecture and security choices, recommending best practices, and advising on realm structure, role governance, and deployment. Supporting POC and pilot phases: participating in technical POCs, developing Keycloak extensions when needed, preparing and automating tests, and collaborating with architecture, security, and development teams. Producing documentation: creating clear, reusable technical documentation and defining administration, update, and security procedures. Delivering training and handover: training an internal Keycloak administrator and ensuring a structured transfer of knowledge to guarantee the BE team's autonomy. The expected deliverables are: Assess the current IAM setup and provide recommendations on architecture, security, role structure, and identity provider integration. Deploy and configure a fully operational Keycloak platform (test + production) integrated with Entra ID, CSAM, and eIDAS. Develop custom Keycloak modules, implement RBAC/ABAC, and integrate with internal back end and front-end systems. Produce complete technical documentation and define update, administration, and security procedures. Create and automate test plans for POCs and platform validation. Train internal staff and ensure full knowledge transfer for autonomous Keycloak administration. Profile: Significant experience with Keycloak "Quarkus based," version > 17, and/or recognized certification in the field of IAM or cybersecurity (CIAM, CISSP, CISM) ideally in the public sector. Strong knowledge of security standards: OAuth2, OpenID, SAML2, JWT. Expertise in Linux and Docker. Good understanding of monitoring and log management tools. Fluent in English, with proficiency in French. Dutch is a plus. What we offer: All our offers are open both for freelancers or permanent contracts for long-term missions. Hybrid schedule 50% remote 50% onsite. Employees receive a competitive salary package with various incentives, including meal vouchers, insurance, and transport benefits. We prioritize your satisfaction by providing dedicated support and follow-up throughout your mission. About us: Aubay is an international IT services agency founded in 1998 who advises companies on their digital transformation. We are active in 7 European countries (France, Belgium, Luxembourg, Spain, Portugal, Italy, U.K.) and our offices are based in Brussels, Namur and Luxembourg (Belux Area). If you're driven by a mission that blends technology, security, and purpose, we'd love to hear from you, send your CV to jobs@aubay.be.