EU remote
Software Developer
About this role
Key Responsibilities: Lead engineering delivery of the permissions workstream and support transition activities. Configure and deploy Keycloak and IAM services within Azure cloud environments. Implement PBAC policies, multi-realm Keycloak environments and identity federation solutions. Integrate Keycloak Authorisation Services with the workbench platform. Integrate Keycloak Authorisation Services with Supervisory Framework Services.
Contribute Keycloak Authorisation expertise to the design and integration of future services, including Document Management Service (Compass). Contribute to Agile delivery activities and collaborative project working. Support solution design, implementation, testing and deployment activities. Essential Experience Recent experience working with Keycloak Authorisation Services and hybrid cloud deployments, including Keycloak version 26.7 or later.
Proficiency in IAM concepts and standards including OAuth, OIDC, JWT, OBO/Token Exchange and Fine-Grained Authorisation. Experience customising and administering Keycloak. Development experience in Java/J2EE and developing custom Keycloak extensions. Experience working in Agile delivery environments. Familiarity with Keycloak Authorisation Services and OAuth/OIDC terminology. Experience installing Keycloak within Azure App Service environments using Java 21 and SQL-backed deployments.
Experience configuring Keycloak clients, policies, attributes, Identity Providers and extensions. Experience developing Keycloak extensions including themes, Service Provider Interfaces (SPI), Dynamic User Profile (DUP), protocol mappers, policy providers and resource providers. Experience working with CI/CD tooling including Maven, JaCoCo, SonarQube, JFrog and Azure DevOps. Experience developing enterprise Java 21 solutions using Maven and JPA.
Desirable Experience Experience implementing PBAC (Policy-Based Access Control) models. Experience deploying and supporting multi-realm Keycloak environments. Experience implementing SSO and identity federation solutions. Experience integrating Keycloak with enterprise platforms and services. Experience working in regulated or financial services environments. Experience contributing to IAM architecture and platform design activities.