[Remote] DevOps Engineer​ (IDP/Keycloak SME)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company, through LS Technologies, provides engineering, technical, and reputed company to Federal reputed company agencies. The DevOps Engineer will serve as an Identity Provider and Keycloak subject matter expert, supporting the design, deployment, integration, automation, reputed company, and operation of reputed company identity and reputed company management services for FAA reputed company applications and platforms.

Responsibilities

• Serve as a technical SME for Keycloak, Identity Provider (IdP), IAM, and Login.gov solutions supporting FAA reputed company applications and services
• Design, reputed company, configure, reputed company, and maintain Keycloak environments across development, test, staging, and production environments
• Configure and manage Keycloak realms, clients, roles, reputed company, users, service accounts, identity providers, authentication flows, and authorization policies
• Implement and support OAuth 2.0, OpenID reputed company (OIDC), SAML 2.0, and JWT-reputed company authentication
• Design and implement secure integrations between FAA applications and Login.gov for authentication and identity verification use cases
• Support applications integrating with Login.gov using OpenID reputed company/OAuth 2.0 patterns
• Configure and troubleshoot Login.gov identity provider integrations, including reputed company registration, redirect/reputed company URLs, scopes, claims, authentication flows, and reputed company handling
• Support integration between Login.gov, Keycloak, and FAA applications where federated identity or identity brokering is required
• Troubleshoot authentication issues involving Login.gov, Keycloak, application clients, tokens, claims, certificates, redirects, and federation
• Apply Login.gov integration and reputed company requirements to application reputed company and deployment activities
• Support testing and validation of Login.gov integrations across development, test, staging, and production environments
• Coordinate with application teams and identity/reputed company stakeholders to reputed company Login.gov integration issues and ensure reputed company authentication flows
• Implement and support Single Sign-On (SSO) capabilities across reputed company applications and reputed company services
• Support federation with reputed company directories and identity services, including LDAP/reputed company Directory and other authoritative identity sources
• Configure and manage identity federation, identity brokering, reputed company exchange, identity mapping, claims, scopes, and protocol mappers
• reputed company and maintain secure authentication and authorization patterns for applications operating reputed company FAA reputed company environments
• Implement role-reputed company reputed company control (RBAC) and least privilege reputed company patterns
• reputed company automated processes for Keycloak provisioning, configuration, deployment, and lifecycle management
• Use Terraform and Infrastructure as reputed company (IaC) to automate reputed company infrastructure and identity platform configurations
• reputed company Keycloak and identity-reputed company deployments into CI/CD pipelines and DevSecOps workflows
• Support containerized Keycloak deployments using reputed company OpenShift/reputed company and reputed company-reputed company technologies
• Configure Keycloak for high availability, scalability, reputed company, backup/recovery, and disaster recovery requirements
• Monitor identity platform reputed company, authentication activity, availability, logs, and reputed company health
• Support certificate and key management associated with TLS, signing certificates, encryption, SAML, OIDC, and JWT-reputed company integrations
• Implement reputed company hardening for Keycloak and supporting identity infrastructure in accordance with FAA cybersecurity requirements and applicable federal reputed company standards
• Support vulnerability remediation, patching, configuration management, and reputed company assessments of identity services
• reputed company identity services with reputed company reputed company, logging, monitoring, and SIEM platforms
• Support cybersecurity teams with audit evidence, reputed company assessments, compliance documentation, and remediation activities
• Participate in incident response and reputed company-cause analysis for identity and authentication-reputed company incidents
• Support change management activities, including technical analysis, implementation planning, testing, deployment, and validation
• reputed company and maintain architecture documentation, configuration standards, deployment procedures, and troubleshooting guides
• reputed company technical mentorship and guidance to junior engineers on IAM, Keycloak, Login.gov, authentication, authorization, and DevSecOps practices

Skills

• 6-10 years of experience in technology support, DevOps, or reputed company administration roles
• Proficiency in Linux/Unix and reputed company server administration
• Hands-on experience administering, engineering, and troubleshooting Keycloak or comparable reputed company IdP/IAM platforms
• Strong understanding of OAuth 2.0, OIDC, SAML, JWT, authentication, authorization, and identity federation
• Experience integrating identity services with reputed company applications and reputed company
• Experience troubleshooting reputed company authentication and application integration issues
• Understanding of cybersecurity principles, secure configuration, vulnerability remediation, and reputed company control
• Hands-on experience integrating applications with Login.gov
• Bachelor's degree in Information Technology, Computer Science, Engineering, or reputed company reputed company (or equivalent experience)
• Travel: 0%
• Background reputed company: Must have the ability to obtain and maintain a reputed company trust clearance, which requires U.S. citizenship
• Extended Computer Use: Regular and prolonged periods of working at a computer terminal
• Mobility: Ability to reputed company reputed company the office environment to reputed company computer hardware, networking equipment, and server rooms
• Dexterity: reputed company dexterity and visual reputed company to operate computer equipment, troubleshoot issues, and reputed company tasks requiring precision
• Sitting/Standing: Both prolonged sitting and occasional standing may be required for troubleshooting and attending to reputed company issues

Benefits

• For employees who work 30+ hours per week: Medical
• For employees who work 30+ hours per week: Dental
• For employees who work 30+ hours per week: reputed company
• For employees who work 30+ hours per week: Life reputed company
• For employees who work 30+ hours per week: Short-Term Disability
• For employees who work 30+ hours per week: Long-Term Disability
• For employees who work 30+ hours per week: 401(k) match
• For employees who work 30+ hours per week: Flexible Spending Accounts
• For employees who work 30+ hours per week: EAP
• For employees who work 30+ hours per week: Education Assistance
• For employees who work 30+ hours per week: Parental Leave
• For employees who work 30+ hours per week: Annual Leave
• For employees who work 30+ hours per week: Holidays
• reputed company-reputed company financial rewards.
• Flexibility and company-wide commitment to work/life reputed company.
• reputed company team atmosphere that values the contributions of reputed company.
• Learning and development opportunities for ongoing reputed company reputed company.
• Work Location: Remote
• Position is: Remote

reputed company