Summary
InnovationTeam is hiring a Senior IAM and Backend Engineer in Riyadh, Saudi Arabia. The role involves building Java and Spring Boot microservices and designing identity and access management solutions using Keycloak. Responsibilities include configuring authentication and access controls, integrating external identity providers, and automating deployments through CI/CD pipelines. Candidates should have hands-on and architectural Keycloak experience, along with Java, OAuth2, OIDC, Docker, and Kubernetes skills.
The posting
As published on innovationteam.com. Pulled from the employer's site and shown as they wrote it.
About the Role:
We’re hiring a highly skilled engineer with deep expertise in Keycloak (Red Hat SSO) and strong backend development experience using Java 17+ and Spring Boot. You will lead efforts in identity & access management, secure microservices development, and CI/CD automation across cloud-native architectures.
We seek someone who can code, integrate, automate, and secure modern systems with confidence.
Key Responsibilities:
- Develop robust and scalable Spring Boot microservices using Java 17+
- Design and implement secure IAM strategies using Keycloak (Red Hat SSO), including:
- Realm and client configurations
- User Management
- Multi-Factor Authentication (MFA)
- Role-based access control (RBAC)
- Federated identity providers (LDAP, Azure AD)
- Protocol mappers, custom authenticators
- Token customization (OIDC / JWT / SAML)
- Integrate Keycloak into enterprise applications and CI/CD pipelines
- Automate deployment processes using CI/CD tools (e.g., GitLab, Jenkins, GitHub Actions)
- Deploy and manage services in Docker/Kubernetes environments
- Apply best practices in security, performance, and observability
- Must-Have Skills:
- Strong Java (17+) and Spring Boot experience
- Java Microservices architecture
- In-depth Keycloak or Red Hat SSO experience — both hands-on and architectural
- Experience building secure REST APIs using OAuth2, OIDC, and JWT
- Proven ability to design, configure, and troubleshoot Keycloak realms, clients, flows, and policies
- Hands-on experience with CI/CD, Docker, and Kubernetes
- Experience integrating Keycloak with external IdPs, LDAP, social logins
- Familiarity with Linux, Bash scripting, and infrastructure automation tools
Nice to Have:
- Knowledge of Istio, Service Mesh, or API Gateways
- Background in securing public APIs and implementing zero-trust patterns
- Exposure to Kafka, Redis, PostgreSQL, MongoDB