Keycloak Consultant

You’re looking for an experienced Keycloak specialist who can own the design, configuration, optimization, and ongoing support of your identity and access management (IAM) environment. This person will work closely with engineering, security, and product teams to ensure your authentication and authorization systems are secure, scalable, and aligned with best practices.

• Lead the architecture, configuration, and deployment of Keycloak for authentication and authorization across internal and customer-facing applications.
• Design and implement realm configurations
  , client setups
  , identity brokering
  , federation
  , and role/permission models
  .
• Integrate Keycloak with applications using OIDC
  , OAuth2
  , SAML
  , and custom protocols where needed.
• Develop and maintain custom Keycloak extensions
  , including SPI implementations, custom authenticators, themes, and user federation providers.
• Optimize Keycloak performance, clustering, and high‑availability setups.
• Establish and document IAM best practices, security controls, and operational procedures.
• Troubleshoot authentication/authorization issues and provide expert-level support to engineering teams.
• Advise on long‑term IAM strategy, including upgrades, migration paths, and integration patterns.
• Provide knowledge transfer, training, and documentation to internal teams.

• Deep, hands‑on experience with Keycloak in production environments.
• Strong understanding of identity protocols (OIDC, OAuth2, SAML).
• Experience with RBAC
  , ABAC
  , and fine‑grained authorization models.
• Proficiency with Java and Keycloak’s SPI for custom extensions.
• Experience deploying Keycloak in containerized or cloud environments (Docker, Kubernetes, AWS, GCP, Azure).
• Strong security background, including authentication flows, token management, and best practices for IAM.
• Ability to work independently as a consultant, define scope, and deliver solutions end‑to‑end.

• Experience with Keycloak.
  
  X or Quarkus-based deployments.
• Familiarity with CI/CD pipelines and Dev Ops tooling.
• Background in zero‑trust architectures or enterprise IAM frameworks.
• Experience migrating from other IAM platforms to Keycloak.
• Contract length and hours flexible based on project scope.
• Remote or hybrid work depending on your team’s needs.
• Deliverables may include architecture design, implementation, documentation, and ongoing support.