Java & Keycloak Engineer

Job Title: Java & Keycloak Engineer

Job Description

This role is an experienced Java & Keycloak Engineer position (SFIA Level 5) with full engineering ownership of a critical permissions and identity workstream. You will work hands-on with Keycloak, Java, Identity & Access Management (IAM) and Microsoft Azure to design, implement and integrate secure, scalable identity and authorisation solutions for a new Workbench platform and related services.

Responsibilities

• Take full engineering ownership and accountability for the delivery of a critical permissions workstream through to business analyst transition.
• Configure and deploy Keycloak and IAM services within Microsoft Azure, ensuring secure and reliable operation.
• Design and implement PBAC (policy-based access control) policies and multi-realm Keycloak environments to support complex access requirements.
• Implement single sign-on (SSO) and identity federation solutions to provide seamless and secure user access.
• Integrate Keycloak Authorisation Services with a new WoEYrk bench platform, ensuring robust permissions and identity handling.
• Integrate Keycloak with Supervisory Framework Services available through the Workbench platform to enable consistent authorisation.
• Provide Keycloak authorisation expertise to support the design and integration of future Workbench services, including document management capabilities.
• Work closely with technical and business stakeholders to deliver secure, scalable identity and permissions solutions that meet evolving business needs.
• Apply strong integration and problem-solving skills to resolve technical challenges and optimise identity and access management across systems.
• Take proactive ownership of the technical workstream, driving delivery, quality and continuous improvement.

Essential Skills

• In-depth, hands-on Keycloak experience, including configuration, deployment and authorisation services.
• Strong Java engineering and development experience in a modern enterprise environment.
• Solid understanding of Identity & Access Management (IAM) concepts, patterns and best practices.
• experience deploying and managing services within Microsoft Azure.
• Practical experience implementing SSO and identity federation solutions.
• Knowledge of PBAC (policy-based access control) and its application within Keycloak and IAM architectures.
• experience working with multi-realm Keycloak configurations.
• Strong systems integration skills, with the ability to connect identity and authorisation services across platforms.
• Excellent problem-solving abilities and a structured approach to diagnosing and resolving complex technical issues.
• Confidence and capability to take ownership of a technical workstream and drive it to successful completion.

Additional Skills & Qualifications

• experience integrating Keycloak Authorisation Services with new or existing platforms such as a Workbench environment.
• Background in designing and supporting supervisory and document management services from an identity and permissions perspective.
• Ability to collaborate effectively with both technical and business stakeholders, translating requirements into secure, scalable solutions.
• Familiarity with Azure cloud-native patterns and services related to identity and access management.
• Strong communication skills, with the ability to explain complex IAM and authorisation concepts in a clear and concise way.

Dublin, Ireland

Trading as TEKsystems. Allegis Group Limited. Level 1, The Chase, Carmanhall Road, Sandyford, Dublin 18, Ireland. No. 909257. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.