Senior Keycloak Administrator

About the role

InnovationTeam is looking for an experienced Senior Keycloak Administrator in Riyadh to lead the design, implementation and ongoing management of its identity and access management (IAM) infrastructure. The role ensures secure authentication and authorization for enterprise applications, optimizes system performance and works with cross-functional teams to integrate Keycloak with cloud and on-premises environments.

Key responsibilities

• Install, configure and maintain Keycloak servers, including realm management, user federation (e.g. LDAP/AD) and custom themes for login, registration and admin consoles
• Design and deploy secure authentication and authorization solutions using OIDC, OAuth2 and SAML, integrating with internal applications, APIs and third-party services
• Manage clustering, high availability, performance tuning and monitoring, and handle upgrades, backups and disaster recovery to ensure 99.9% uptime
• Implement RBAC, fine-grained permissions and security policies, and carry out security audits and vulnerability assessments (GDPR, HIPAA, SOC 2)
• Troubleshoot authentication failures, token issues and integration problems, and optimize Keycloak for cloud (AWS, Azure) or hybrid environments
• Work with development, DevOps and security teams, and maintain configuration, process and troubleshooting documentation
• Develop custom Keycloak extensions, providers or scripts using Java or REST APIs when needed

Required profile

• 5+ years in IAM administration, with at least 3 years focused on Keycloak and a proven track record in enterprise deployments
• Ability to troubleshoot complex issues in high-availability setups

Required skills

• Expert-level Keycloak (realms, clients, roles, users, events, Admin REST API)
• Identity protocols (OAuth2, OIDC, SAML, JWT) and tools such as LDAP and Kerberos
• Containerization (Docker, Kubernetes) and cloud platforms (AWS, Azure)
• Databases (PostgreSQL, MySQL) and monitoring tools (Prometheus, Grafana)