Senior IAM

Our client is looking for a Senior IAM / IGA Operations Engineer to strengthen the Identity & Access (IAM) Management team.

The IAM team is responsible for the management, availability, and evolution of the central identity platforms within the organization. These platforms form an essential part of the security infrastructure and support authentication, authorization, and identity lifecycle processes.

The environment includes the following technologies, among others:

• Keycloak (IAM – authentication and authorization)
• MidPoint (IGA – identity lifecycle management)

The assignment is situated in a critical production environment with high requirements regarding stability, performance, and security. The consultant will assume a key role in the operational management, troubleshooting, and lifecycle management of these platforms, in close collaboration with infrastructure and development teams.

The consultant will be responsible for the operational management and continuous improvement of IAM and IGA platforms, with a focus on stability, security, and performance. The tasks include, among others:

Operational Management:

• Performing daily operational tasks on IAM and IGA platforms
• Monitoring the IAM stack and following up on alerts
• Analyzing and interpreting logs (Keycloak, MidPoint, infrastructure)
• Managing TLS certificates and IdP certificates (SAML / OIDC)
• Working with and supporting databases (PostgreSQL, MariaDB)
• Actively contributing to the stability and performance of the platforms

Incident Management & Troubleshooting:

• Analyzing and resolving incidents and technical problems
• Performing in-depth root cause analyses
• Troubleshooting authentication, authorization, and provisioning issues
• Restarting and restoring platforms (Keycloak / MidPoint) during incidents
• Identifying the correct cause (IAM vs. other systems) and escalating correctly
• Proposing and implementing structural solutions

Lifecycle management:

• Management of the entire lifecycle of the platforms
• Executing minor upgrades
• Preparing and executing major upgrades and migrations:
• Validating installations and configurations across different environments

Configuration & Security:

• Configuring and maintaining Keycloak and MidPoint
• Implementing authentication flows, roles, policies, and provisioning rules
• Detecting and correcting security risks in configurations
• Defining and applying best practices

Integration & Provisioning:

• Management and optimization of joiner / mover / leaver processes
• Management of roles and access models
• Onboarding new applications onto IAM platforms
• Integration of applications via OIDC / OAuth2 and SAML
• Integration with target systems (resources) and provisioning flows

Automation:

• Designing and implementing automations (installation, configuration, provisioning)
• Use of scripting (Groovy, Python, …)
• Optimizing operational processes

Documentation & Knowledge Sharing:

• Drafting and maintaining technical documentation
• Documenting configurations, processes, and incidents
• Knowledge sharing within the team and coaching less experienced profiles

Collaboration:

• Close collaboration with infrastructure teams (hosting, HA, security, performance), development teams (integrations and applications), and security stakeholders
• Act as the technical point of contact within the domain

Technical competencies:

• The consultant possesses at least the following competencies:
• Demonstrable experience with IAM and/or IGA platforms in an operational context
• Strong knowledge of Keycloak and/or MidPoint
• In-depth knowledge of IDC, OAuth2, SAML

Experience with:

       o Troubleshooting and root cause analysis

       o Linux environments

       o Databases (PostgreSQL, MariaDB)

Experience with:

       o Integrations and provisioning

       o Security configurations within IAM

Experience with platform upgrades and migrations

In addition, the following competencies are desirable:

• Knowledge of LDAP / directory services
• Experience with automation and scripting (Groovy, Python, Javascript, …)
• Knowledge of high availability (HA) architectures
• Experience in complex enterprise environments

Generic competencies:

• Strong analytical and problem-solving skills
• Proactive and results-oriented attitude
• Sense of responsibility and ownership
• Strong communication skills
• Team player with a coaching mindset
• Able to work independently and make decisions

Languages:

• Active knowledge of the other national language and very good knowledge of English, specifically in the field of technical communication and documentation.