Senior IAM

Function

• The IAM team is responsible for the management, availability and evolution of the central identity platforms within the organization. These platforms are an essential part of the security infrastructure and support authentication, authorization and identity lifecycle processes.

The environment includes the following technologies:

• Keycloak (IAM – authentication and authorization)
• MidPoint (IGA – identity lifecycle management)
   
• The assignment is located in a critical production environment, with high requirements in terms of stability, performance and security. The consultant will take on a key role in the operational management, troubleshooting and lifecycle management of these platforms, working closely with infrastructure and development teams.
• The consultant will be responsible for the operational management and continuous improvement of IAM and IGA platforms, with a focus on stability, security and performance. The tasks include:

Operational management

• Performing daily operational tasks on IAM and IGA platforms
• Monitoring the IAM stack and following up alerts
• Analyzing and interpreting logs (Keycloak, MidPoint, infrastructure)
• Managing TLS certificates and IdP certificates (SAML / OIDC)
• Working with and supporting databases (PostgreSQL, MariaDB)
• Actively contributing to the stability and performance of the platforms

Incident management & troubleshooting

• Analyzing and resolving incidents and technical problems
• Performing in-depth root cause analyses
• Troubleshooting authentication, authorization and provisioning problems
• Restarting and restoring platforms (Keycloak / MidPoint) in the event of incidents
• Identifying the correct cause (IAM vs other systems) and escalating correctly
• Proposing and implementing structural solutions

Lifecycle management

• Management of the entire lifecycle of the platforms
• Performing minor upgrades
• Preparing and executing major upgrades and migrations:
• Validating installations and configurations across different environments

Configuration & security

• Configure and maintain Keycloak and MidPoint
• Implement authentication flows, roles, policies and provisioning rules
• Detect and correct security risks in configurations
• Define and apply best practices

Integration & provisioning

• Management and optimization of joiner / mover / leaver processes
• Management of roles and access models
• Onboarding of new applications on IAM platforms
• Integration of applications via OIDC / OAuth2 and SAML
• Integration with target systems (resources) and provisioning flows

Automation

• Design and implementation of automations (installation, configuration, provisioning)
• Use of scripting (Groovy, Python, ...)
• Optimizing operational processes

Documentation & knowledge sharing

• Drafting and maintaining technical documentation
• Documenting configurations, processes and incidents
• Knowledge sharing within the team and coaching of less experienced profiles

Collaboration

• Close cooperation with infrastructure teams (hosting, HA, security, performance), development teams (integrations and applications), security stakeholders
• Acting as a technical point of contact within the domain

Technical competencies

• The consultant has at least the following competencies:
• Demonstrable experience with IAM and/or IGA platforms in an operational context
• Strong knowledge of Keycloak and/or MidPoint
• In-depth knowledge of IDC, OAuth2, SAML
• Experience with:

• Troubleshooting and root cause analysis
• Linux environments
• Databases (PostgreSQL, MariaDB)

• Experience with:

• Integrations and provisioning
• Security configurations within IAM

• Experience with platform upgrades and migrations

In addition, it is also desirable that the following competencies are present:

• Knowledge of LDAP / directory services
• Experience with automation and scripting (Groovy, Python, Javascript, ...)
• Knowledge of high availability (HA) architectures
• Experience in complex enterprise environments