About the job
Become an integral part of our International Team and contribute to the development of innovative greenfield software for one of the most significant projects within the Deutsche Telekom Group. Your contributions will directly affect our 30 million customers, empowering them to request fiber network installations at their homes and monitor the progress of these installations.
Our solution encompasses a comprehensive suite of applications and websites designed to streamline end-to-end processes spanning fiber pre-ordering, ordering, installation, service management, and customer support.
Your Role as an IAM DevOps Engineer
In this role, you will be responsible for developing and managing Keycloak/RHSSO-based Identity Access Management (IAM) capabilities on Kubernetes. This will facilitate secure single sign-on (SSO) and machine-to-machine access for our internal products.
You will enhance team development by standardizing deployment, configuration, and troubleshooting practices while continuously driving improvements in reliability, security, and automation related to the IAM platform.
Your Profile
- Minimum of 3 years of experience in a DevOps or Platform Engineer (or Site Reliability Engineer) role with hands-on experience in Kubernetes operations within production environments.
- Strong understanding of OAuth 2.0 and OpenID Connect principles for modern IAM integrations and SSO workflows.
- Practical experience with GitOps delivery methodologies utilizing Argo CD.
- Experience with containerization (Docker) and CI/CD pipelines (e.g., GitLab) from code commit to production deployment.
- Proficiency in scripting languages such as Python and Bash for automation and troubleshooting.
IAM, Keycloak, and Troubleshooting Expertise
- Understanding of IAM fundamentals including authentication vs. authorization, identity lifecycle and provisioning flows, role/permission model design, user types, and machine-to-machine concepts.
- Hands-on experience with Keycloak/RHSSO, including realms, clients, roles, scopes, identity providers, and themes, as well as troubleshooting authentication and authorization workflows end-to-end.
- Configuration-as-code mindset for Keycloak management, promoting changes across environments using versioned configurations.
- Ability to diagnose and resolve platform issues, contribute to incident response, and assist in upgrades and migrations.
Cloud, DevOps, and Containerization Skills
- Experience with Kubernetes and networking, including deployments, services, ingress, environment-specific configurations, and secure management of secrets/config maps.
- Knowledge of packaging and delivery using Helm charts and Argo CD application management for GitOps workflows.
- Experience in CI/CD practices using GitLab, including building, testing, and deploying containerized workloads.
- Familiarity with Infrastructure as Code (IaC) methodologies for managing environments and application infrastructure.
- Observability experience with tools such as Grafana, Prometheus, and ELK.

