AWS Cloud Infrastructure Engineer - Keycloak Specialty

Jobgether • United States

Remote

This Job is No Longer Active This position is no longer accepting applications

AI Summary

Design and secure enterprise-grade identity and access management solutions in AWS for mission-critical government systems. Implement SSO, MFA, and federated identity across microservices while ensuring Zero Trust and federal compliance. Collaborate with security and DevSecOps teams to embed identity controls into CI/CD pipelines and infrastructure as code.

Key Highlights

Keycloak and AWS IAM Identity Center expertise

Zero Trust architecture and federal compliance (FedRAMP, FISMA, NIST 800-63)

Integration of SAML, OAuth2.0, OIDC, and SCIM protocols

CI/CD and IaC implementation for identity governance

Remote work eligible within the United States

Key Responsibilities

Design, implement, and maintain secure identity and access management solutions across AWS cloud environments

Architect and implement authentication and authorization frameworks for secure, scalable, and compliant access

Integrate SSO and federated authentication solutions using SAML, OAuth2.0, and OpenID Connect protocols

Configure and integrate identity providers such as AWS IAM Identity Center, AWS Cognito, Azure AD, IBM Verify, and Keycloak

Enforce Zero Trust Architecture principles across microservices, APIs, and cloud-native applications

Develop and manage identity lifecycle processes including provisioning, deprovisioning, and access reviews

Define and enforce RBAC/ABAC policies ensuring least-privilege access across users and systems

Design logging, monitoring, and auditing strategies for authentication and authorization events using AWS and SIEM tools

Collaborate with DevSecOps teams to embed ICAM policies into CI/CD pipelines and infrastructure-as-code templates

Lead identity integration design sessions and provide technical oversight for architecture, security, and vulnerability management initiatives

Interested in remote work opportunities in Devops? Discover Devops Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

Keycloak AWS IAM Identity Center SAML OAuth2.0 OpenID Connect SCIM RBAC ABAC PKI digital certificates encryption AWS KMS AWS CloudTrail AWS Lambda AWS API Gateway authentication SailPoint Saviynt

Benefits & Perks

Competitive salary range of $153,000 to $207,000 annually

Comprehensive medical, dental, and vision insurance

401(k) retirement plan with company match

Flexible work arrangements with fully remote eligibility

Paid time off including vacation, sick leave, holidays, and parental leave

Life, disability, and supplemental insurance options

Professional development and internal mobility programs

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Experience with SailPoint or Saviynt

Job Description

This role focuses on designing and securing enterprise-grade identity and access management solutions within a complex AWS cloud environment supporting mission-critical government systems. You will architect and implement authentication and authorization frameworks that enable secure, scalable, and compliant access across modern cloud applications. Acting as a subject matter expert in Keycloak and identity federation, you will integrate SSO, MFA, and federated identity across microservices and APIs while ensuring adherence to Zero Trust principles. The position involves close collaboration with security, architecture, and DevSecOps teams to embed identity controls into CI/CD pipelines and infrastructure as code. You will also play a key role in ensuring compliance with federal standards such as FedRAMP, FISMA, and NIST 800-63. This is a highly technical and security-critical role where identity architecture directly supports national-level digital modernization efforts.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.