We are hiring a Senior Technical Specialist to lead engineering and operations for Keycloak-based Web SSO/IAM and Open Bao-based secret management. The role involves owning end-to-end delivery including packaging (Helm, containers, RPM), integrations (e.g., MariaDB, load balancers), upgrades, and lifecycle management aligned with certification and reliability standards. The candidate will define best practices for Keycloak configurations (realms, roles, federation, MFA) and Open Bao usage (policies, auth methods, engines, audit, and metrics). Additionally, the role includes driving CI/CD and automation improvements, troubleshooting complex issues such as SSO flows, TLS, and failover scenarios, and mentoring engineers through design reviews and technical guidance.

Must have -

• 8+ years of experience in software design, development, and testing, with a Bachelor’s/Master’s degree (or equivalent) in Computer Science or a related field.
• Strong expertise in Keycloak (SSO/IAM, OIDC/OAuth2, federation, MFA, theming) and Open Bao (or Hashi Corp Vault equivalent).
• Proficiency in Python, with working knowledge of Go and/or Java.
• Hands-on experience with Kubernetes, Helm, Docker, CI tools like Jenkins, and integrations (MariaDB/MySQL, load balancers), along with solid security fundamentals (TLS, SSH, PKI).

Good to have -

• Experience with CI/CD testing frameworks (Robot, Pytest, Radish, Cucumber, etc.) and certification-style validation.

• Exposure to packaging formats such as RPM and multi-format delivery pipelines.

• Familiarity with security scanning and vulnerability tools (Anchore, Tenable, Netsparker, Nmap, SBOM tooling).

• Experience in HA setups, performance tuning, complex troubleshooting, and working with global/distributed teams.

• Lead Keycloak delivery: packaging (Helm/Docker/RPM/related), theme, upgrades, reliability, LCM alignment.

• Lead Open Bao-based secrets: engines (DB, PKI, transit, SSH CA), K8s auth, policies, audit/metrics.

• Define guidance for teams: Keycloak entities (realms, roles, federation, MFA) and Open Bao policies/operations.

• Improve CI, automation, and certification (function/performance).

• Triage complex issues: SSO flows, TLS, tokens, Bao HA/failover, upgrade regressions.

• Mentor Senior Engineers and others; review designs and changes.