The SFPD is looking for a Senior IAM / IGA Operations Engineer to strengthen the Identity & Access (IAM) Management team.

Role

The IAM team is responsible for the management, availability, and evolution of the central identity platforms within the organization. These platforms form an essential part of the security infrastructure and support authentication, authorization, and identity lifecycle processes.

The environment includes, among others, the following technologies:

• Keycloak (IAM – authentication and authorization)
• MidPoint (IGA – identity lifecycle management)

The assignment is situated in a critical production environment, with high requirements in terms of stability, performance, and security. The consultant will play a key role in the operational management, troubleshooting, and lifecycle management of these platforms, in close collaboration with infrastructure and development teams.

The consultant will be responsible for the operational management and continuous improvement of IAM and IGA platforms, focusing on stability, security, and performance. Tasks include, among others:

1. Operational Management

• Performing daily operational tasks on IAM and IGA platforms
• Monitoring the IAM stack and following up on alerts
• Analyzing and interpreting logs (Keycloak, MidPoint, infrastructure)
• Managing TLS certificates and IdP certificates (SAML / OIDC)
• Working with and supporting databases (PostgreSQL, MariaDB)
• Actively contributing to the stability and performance of the platforms

1. Incident Management & Troubleshooting

• Analyzing and resolving incidents and technical issues
• Performing in-depth root cause analyses
• Troubleshooting authentication, authorization, and provisioning issues
• Restarting and restoring platforms (Keycloak / MidPoint) in case of incidents
• Identifying the correct cause (IAM vs other systems) and escalating appropriately
• Proposing and implementing structural solutions

1. Lifecycle Management

• Managing the full lifecycle of the platforms
• Performing minor upgrades
• Preparing and executing major upgrades and migrations
• Validating installations and configurations across different environments

1. Configuration & Security

• Configuring and maintaining Keycloak and MidPoint
• Implementing authentication flows, roles, policies, and provisioning rules
• Detecting and correcting security risks in configurations
• Defining and applying best practices

1. Integration & Provisioning

• Managing and optimizing joiner / mover / leaver processes
• Managing roles and access models
• Onboarding new applications onto IAM platforms
• Integration of applications via OIDC / OAuth2 and SAML
• Integration with target systems (resources) and provisioning flows

1. Automation

• Designing and implementing automations (installation, configuration, provisioning)
• Using scripting (Groovy, Python, …)
• Optimizing operational processes

1. Documentation & Knowledge Sharing

• Drafting and maintaining technical documentation
• Documenting configurations, processes, and incidents
• Sharing knowledge within the team and coaching less experienced profiles

1. Collaboration

• Close collaboration with infrastructure teams (hosting, HA, security, performance), development teams (integrations and applications), security stakeholders
• Acting as a technical point of contact within the domain

Technical Competencies

The consultant has at least the following competencies:

• Demonstrable experience with IAM and/or IGA platforms in an operational context
• Strong knowledge of Keycloak and/or MidPoint
• In-depth knowledge of OIDC, OAuth2, SAML
• Experience with:
• Troubleshooting and root cause analysis
• Linux environments
• Databases (PostgreSQL, MariaDB)
• Experience with:
• Integrations and provisioning
• Security configurations within IAM
• Experience with upgrades and migrations of platforms

In addition, the following competencies are also desirable:

• Knowledge of LDAP / directory services
• Experience with automation and scripting (Groovy, Python, Javascript, …)
• Knowledge of high availability (HA) architectures
• Experience in complex enterprise environments

Generic Competencies

• Strong analytical and problem-solving skills
• Proactive and results-oriented attitude
• Sense of responsibility and ownership
• Strong communication skills
• Team player with a coaching mindset
• Able to work independently and make decisions

Languages

Active knowledge of the other national language and very good knowledge of English, specifically in the field of technical communication and documentation.

Selection

The place of employment is Brussels. We offer the possibility to telework part-time.