Job Closed

This listing is no longer active.

Interval Group logo
Interval Group

High quality consulting. On demand. Delivered by top professionals.

IAM KeyCloak Secrets PKI Engineer

EngineerEngineerContractRemoteSeniorTeam 51-200H1B No SponsorCompany SiteLinkedIn

Location

Germany

Posted

48 days ago

Salary

0

Seniority

Senior

Job Description

IAM KeyCloak Secrets PKI Engineer

Interval Group

• We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector. • You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability. • Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles and clients • Configuring SSO flows, MFA and identity federation across hybrid cloud and on-premises workloads • Deploying Keycloak on VMs, Docker and Kubernetes (OpenShift and bare-metal), configuring OIDC, OAuth2, SAML and Kerberos/LDAP federation • Deploying Keycloak on GKE with Helm/Operators, integrating with Google Identity and mapping Keycloak roles to GCP IAM roles • Configuring HashiCorp Vault to secure Keycloak operational secrets, implementing dynamic secrets for DB backends and integrating Vault Agent/Sidecar injector for secret injection into Keycloak pods • Deploying and operating Vault in production on Linux-based systems, including HA, Raft storage, seal/unseal mechanisms and HSM/KMS integration • Managing Vault PKI operations including intermediates, issuing CAs, short-lived certificate issuance, CRL/OCSP integration and automated revocation • Implementing ACME v2, EST for devices, AIA/CRL/OCSP publishing and RFC 5280 profiles • Automating Keycloak and Vault deployment and configuration using Terraform, Helm and Ansible • Integrating certificate and secret distribution into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI) • Monitoring both platforms with Prometheus and Grafana and managing incident response for expired certificates, Vault unseal failures and IPA migration issues

Job Requirements

  • Strong knowledge of authentication protocols including OIDC, OAuth2, SAML, Kerberos and LDAP
  • Expertise with Keycloak deployment across VM, Kubernetes and optionally GCP
  • Experience integrating Vault for secrets management
  • Experience with Terraform, Helm and ArgoCD automation
  • Expertise troubleshooting hybrid IAM flows
  • Vault Fundamentals: hands-on experience deploying and managing Vault clusters in production including HA, Raft storage, seal/unseal (KMS/HSM) and PKI secrets engine operations
  • PKI Secrets Engine: experience managing intermediates, role definitions, short-lived certificate issuance, CRLs and automated revocation, with ability to integrate PKI with applications and services
  • Certificate Lifecycle Management: experience automating issuance and renewal via Vault Agent, API or CI/CD pipelines, including rotation policies, revocation and certificate policy SLOs
  • Integration experience with enterprise systems including Kubernetes ingress, load balancers, VPN, S/MIME, databases, ACME, EST and revocation protocols
  • Experience implementing RBAC, audit devices and HSM/KMS key protection
  • Fluent English (C1 minimum)

Benefits

  • flexible working hours
  • the freedom to choose your own projects
  • access to exciting projects in various industries
  • competitive pay
  • dedicated team support

Related Categories

Related Job Pages

More Engineer Jobs

Buildkite logo

Escalations Engineer - Pipelines

Buildkite

Buildkite is the fastest, most reliable way to deploy and test code at any scale.

Engineer48 days ago
Full TimeRemoteTeam 11-50Since 2013H1B No Sponsor

Role Description In this role, you'll own the engineering response to the hardest problems our customers run into. You'll work inside the Pipelines team — partnering closely with Support, TAMs, and Solutions Architects — to take escalations from symptom to root cause, ship fixes back into the product, and remove the underlying causes of recurring tickets. This is a deliberately different role from the traditional support engineering hamster wheel. We're not looking for someone to just clear tickets faster. We're looking for someone to own the space — to spot patterns, drive systemic fixes, and make Buildkite stickier and more reliable for the customers who depend on it most. - Own L3 escalations end-to-end — from symptom through diagnosis to a shipped fix - Work in our Ruby on Rails monolith and PostgreSQL databases to resolve issues at the source - Spot recurring patterns in support load and ship product changes that eliminate the underlying cause — the best support ticket is the one that never gets opened - Partner with Support, TAMs, and Solutions Architects on technical diagnostics for high-impact customers - Lead the engineering side of incident response when production issues require deeper investigation - Help improve the onboarding and migration experience for customers moving onto Buildkite from other CI/CD platforms - Take customer wins from intake to delivery — own them, follow through, don't drop the ball - Contribute to architectural discussions on platform reliability and customer experience - Provide or respond to feedback on GitHub pull requests Qualifications - 5+ years of experience in engineering - Comfortable working in a Ruby on Rails monolith — able to read, debug, and modify production code confidently - A track record of taking problems from symptom to root cause without losing focus or scope - Pattern recognition — you see recurring issues and propose systemic fixes rather than one-off patches - Comfortable in customer-facing conversations when escalations require it — can triage in real time, communicate clearly, and give customers confidence they're in the right hands - Comfortable with performance at scale — N+1 queries, indexing strategies, diagnosing slow paths - Experience using observability tools like Datadog, Honeycomb, etc. - Care about code quality and know how to balance perfect with practical - Calm and consistent under high volume — finish what you start - Understand good development practices: clear commits, thoughtful pull requests, and reliable tests with tools like RSpec Requirements - Key Technical Stacks & Components: - Ruby on Rails - PostgreSQL - GraphQL - React - Datadog - Amazon ECS - RDS Performance Insights - Terraform - Redis - Kafka Benefits - Competitive compensation and benefits package - Flexible, remote-first culture - Opportunities for professional growth, leadership, and technical ownership - Work alongside talented, passionate engineers building world-class developer tools - A collaborative, inclusive, and innovative culture where your ideas make a real impact Equal Opportunity Employer At Buildkite, we value diversity and celebrate all types of skills, backgrounds, and experiences. We’re dedicated to fostering an inclusive environment and providing reasonable accommodations throughout our recruitment process. If you need any accommodations or support during the application or interview process, please reach out to us at accommodations@buildkite.com.

Australia and New Zealand
talentpluto logo

Forward Deployed Engineer

talentpluto

The AI headhunter connecting elite tech sales talent with high-growth startups.

Engineer48 days ago
Full TimeRemoteTeam 1-10Since 2024H1B No Sponsor

• Partner directly with customers during pre-sales and post-sales technical engagements • Support proofs of concept, pilot implementations, and production-oriented deployments • Troubleshoot integration issues and help customers build within their own environments • Translate customer requirements into practical technical solutions • Collaborate closely with product, engineering, and go-to-market teams to unblock customer progress • Represent the company credibly in technical conversations with senior engineers and enterprise stakeholders • Surface recurring customer needs and implementation patterns to internal teams

New York
Job Closed
Modus Create logo

Senior Bazel Engineer

Modus Create

Modus Create is a consulting firm founded in 2011 to help clients transform their businesses to succeed in the digital future. Modus Create employs a fully dist

Engineer48 days ago

Role Description We are looking for a Bazel Engineer to join our Scalable Builds department in a fully remote, distributed environment. In this role, you will: - Work closely with clients to design, implement, and optimize build infrastructure for large-scale software projects. - Help organizations improve developer productivity, build reliability, and engineering velocity by leveraging Bazel and related technologies. - Collaborate with experienced engineers across a variety of domains. - Contribute to open source projects. - Shape the future of build systems both within Tweag and in the broader Bazel ecosystem. This is an excellent opportunity for someone who enjoys solving complex technical problems while working directly with clients and the open source community. Qualifications - Strong hands-on experience with Bazel and modern build systems. - Senior-level experience in software engineering. - Strong understanding of build system architecture, scalability, and performance optimization. - Experience with developer productivity tooling and CI/CD environments. - Consultant mindset: confident yet humble, principled yet pragmatic. - Strong written and verbal communication skills. - Comfortable presenting technical solutions clearly to clients. - Ability to collaborate effectively in a fully remote environment. - Interest in exploring new technologies and contributing to open-source communities. Requirements - Experience migrating legacy build systems to Bazel or improving existing Bazel-based setups (Bonus points). - Experience setting up and optimizing Bazel remote caching and remote build execution (RBE) for performance and scalability (Bonus points). - Broad exposure to multiple programming languages and platforms (Bonus points). Benefits - Fully remote position with excellent work/life balance. - Deep diving into complex engineering challenges. - Sharing knowledge through open source contributions and community engagement. - Continuous learning and growing your expertise in scalable build infrastructure. - Representing Tweag while working with some of the world's most recognized brands.

Worldwide
Job Closed
Avomind logo

Lead Full Stack Engineer

Avomind

Commercial, Strategy & Analytics Talent Globally 🚀

Engineer49 days ago
Full TimeRemoteTeam 11-50Since 2019H1B No Sponsor

Role Description Our client is seeking an experienced Lead Full Stack Engineer to build and scale critical systems across backend services and user-facing applications on their trading platform. This role is ideal for a strong individual contributor who enjoys solving complex engineering problems in environments where latency, correctness, reliability, and user experience are essential. The Lead Full Stack Engineer will contribute hands-on across core backend systems and frontend applications, working on components such as trading workflows, user lifecycle, risk and margin flows, financial data surfaces, and real-time interfaces. The ideal candidate will combine strong backend depth with frontend ownership and will be comfortable driving technical execution, code quality, and architectural decisions as an individual contributor. Roles and Responsibilities - Build and enhance backend services powering the trading platform, including user lifecycle, trade processing, and core financial workflows. - Develop and maintain frontend applications and interfaces used by traders for order placement, positions tracking, portfolio monitoring, and related workflows. - Contribute to the design and implementation of systems related to margin workflows, risk checks, balances, P&L calculations, and financial data accuracy. - Build scalable and performant APIs and services using Node.js or Golang, with strong attention to latency, concurrency, and system reliability. - Build responsive, intuitive, and high-performance user interfaces using React.js or equivalent frontend frameworks. - Work on real-time systems and interfaces, including APIs and WebSocket-based data flows used by retail traders, algorithmic traders, and institutional clients. - Make sound technical decisions for performance-critical and correctness-sensitive systems in collaboration with senior engineering stakeholders. - Review code and designs to identify scalability bottlenecks, concurrency issues, edge cases, and potential failure modes. - Participate actively in debugging production issues, incident response, root cause analysis, and follow-through fixes. - Collaborate closely with Product, Design, QA, Risk, and backend/frontend peers to deliver reliable and high-impact product features. - Drive engineering best practices around code quality, testing, observability, and maintainability through hands-on contribution and technical leadership. - Take end-to-end ownership of modules and features, from design and development to deployment and production support. Qualifications - Bachelor's degree in Computer Science, Engineering, or a related field. - 5–8 years of experience building production-grade software systems as a backend or full stack engineer. - Strong hands-on experience with backend technologies such as Node.js or Golang. - Strong hands-on experience with React.js or equivalent modern frontend frameworks. - Experience building and shipping systems where performance, reliability, data integrity, and user experience are critical. - Solid understanding of concurrency, asynchronous programming, API design, and distributed systems fundamentals. - Experience building frontend applications with complex state management, data-heavy interfaces, and real-time updates. - Ability to independently own and deliver features in a fast-paced environment while collaborating with cross-functional teams. - Strong problem-solving, debugging, system design, and communication skills. Preferred Skills - Experience building trading systems, fintech products, or exchange infrastructure. - Experience working on real-time dashboards, transaction-heavy systems, or high-throughput platforms. - Familiarity with WebSockets, event-driven systems, caching layers, and performance optimization. - Experience with cloud-native deployment environments, observability tooling, and production troubleshooting. - Ability to act as a technical anchor for modules and guide engineering decisions without people-management responsibility.

Vietnam