Keycloak Security Assessment and Hardening

Project overview

Scope of Services

• Analysis and evaluation of an existing Keycloak landscape from information security and IAM perspectives
• Performance of a security assessment for the connected applications
• Review of existing authentication, authorization, and user management processes
• Analysis of Keycloak configurations regarding security risks, best practices, and operational stability
• Identification of vulnerabilities, misconfigurations, and potential attack scenarios
• Performance of a review of the role, rights, and tenant concepts
• Evaluation of the integration of internal and external user groups from a security perspective
• Definition of technical and organizational improvement measures
• Creation of a prioritized catalog of measures including risk and impact assessment
• Development of an implementation and hardening plan for sustainable improvement of the security architecture
• Consultation of project participants regarding best practices in Identity & Access Management (IAM)

Requirements

Contact Person: Professional Recruiting Ms. Eva Schade

FERCHAU Contract GmbH

Munich CONTRACT branch

Claudius-Keller-Straße 3a

81669 Munich

• Expertise in IT security, IAM, or identity architecture, as well as with Keycloak in complex enterprise environments
• Profound know-how in the architecture, administration, and security of Keycloak, as well as in access governance
• Routine approach in conducting security assessments, security reviews, or hardening projects
• Confident handling of modern authentication and authorization methods, as well as OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and Single Sign-on (SSO)
• Experience in analyzing role and authorization concepts, as well as in common security standards and best practices
• Practical knowledge in creating catalogs of measures, recommendations for action, and technical roadmaps

Project details

• Start: flexible
• Remote: remote
• Location: München, Deutschland, DE
• Languages: German