Keycloak Specialist (IAM)

Project overview

We are looking for an experienced Keycloak specialist to manage and further develop our Identity and Access Management infrastructure. You will be part of a team that operates central applications for a large health insurance organization and works from Essen.

Your main tasks include the maintenance and further development of identity and master data connections in test and production environments. You will configure and manage realms, clients, organizations, and authentication flows. An important aspect of your work is setting up new tenants, including necessary network adjustments and connecting Active Directory or Entra ID systems.

You will be responsible for proactive monitoring of Keycloak versions and their timely adoption in coordination with technical operations. Furthermore, you will perform technical functional tests, monitor CVE reports, and implement corresponding mitigations. Handling data protection requests and analyzing authentication and provisioning errors are also part of your responsibilities.

For this position, you need very good Keycloak know-how as well as in-depth knowledge of OAuth2, OIDC, 2FA technologies (TOTP, FIDO2 Passkeys), and security best practices. Experience with Active Directory and Entra ID is required, as is an understanding of network structures. Knowledge of ITIL and experience with Keycloak Extensions (Java/SPI) are advantageous.

Fluent German and good English are required. The position is limited to full-time until the end of 2026 and can be performed remotely or on-site in Essen.

Project details

• Start: a.s.a.p.
• Duration: ca. 40 PT bis 31.12.2026
• Remote: onsite
• Location: Essen, DE
• Languages: German