IAM Platform Engineer - Keycloak & Java

• experience with Keycloak or similar Identity Provider technology;

• knowledge of OpenID Connect, OAuth2, SAML, and federated authentication;

• experience with Java, preferably in an environment with integrations, services, extensions, or custom components;

• experience with CI/CD, containers, Kubernetes, Linux, and platform engineering;

• insight into how TLS certificates, truststores, mTLS, and PKI integrate with Keycloak environments; experience with certificate-based authentication is a plus;

• a proactive attitude, the ability to explain technical choices clearly, and a strong collaborative style with a sense of quality, continuous improvement, and ownership.

For our employment conditions, we follow the CAO Rijk.
That means you can count on the following, among other things:

• A salary of at least € 4132,- and at most € 6275,- gross per month based on 36 hours. Depending on your knowledge and experience.

• 8% holiday allowance and a 13th month. In total, this is 16.5% on top of your salary. We call this the Individual Choice Budget (IKB). You decide yourself how, when, and in what way you want to use this budget.

• Pension accrual at the ABP Pension Fund.

• A laptop (Microsoft or Apple) and mobile phone (Android or iOS).

• Two to three days of working from home, the rest you are present in our recently renovated building. You will make further agreements about this within your team.

Do you have a vision for identity platforms, do you enjoy working on modern authentication solutions, and can you get technology and collaboration moving?

You are an engineer who understands technology and looks beyond just the tooling. You feel at home in an environment where development, integration, management, and coordination come together.

In addition, you bring:

Within the IAM Platform team at CBS, we are looking for an engineer who wants to build future-proof identity services based on open standards and modern platform technology.

In this role, you will work on the development, integration, and further development of our IAM platform.

You will focus on identity components such as Keycloak, federation, authentication flows, and connections with applications and platforms. In doing so, you combine platform thinking with engineering: you not only contribute to building a stable provision, but also ensure that it becomes more automated, integrates better, and becomes easier to scale.

You will work on an IAM platform that is secure, robust, and well-manageable.
In this, you will:

• develop and manage IAM functionality based on Keycloak and related identity components;

• realize connections with applications, APIs, and platform services;

• work on authentication, authorization, and federation issues using standards such as OpenID Connect, OAuth2, and SAML;

• develop and maintain custom work, extensions, or integrations in Java;

• automate deployments, testing, and changes via CI/CD and work with technologies such as Linux, Docker, Kubernetes, and Helm;

• coordinate with architects, platform teams, security specialists, and PKI colleagues to realize consistent solutions for, among other things, TLS certificates, truststores, mTLS, and certificate-based authentication.