Senior Software Developer; m​/w​/d; Keycloak Identity & Access Management

Stellenbezeichnung: Senior Software Developer (m/w/d) - Keycloak Identity & Access Management
Our
** Auth API & API Management
** team develops and operates central platform services that support EVENTIM's products across international markets.  A key part of our work is our central
** Identity & Access Management platform built on Keycloak**. It enables secure authentication and Single Sign-On across different products and markets, operating internationally and handling high traffic volumes.  Closely connected to our identity platform are our
** API Gateway and API Management solutions**, which ensure that APIs are exposed securely and reliably. Both areas are tightly integrated, particularly when it comes to authentication, authorization, and API security.  As a Senior Software Developer, you will work alongside your team to continuously develop and enhance these platforms, shaping essential solutions around
** Identity & Access Management, Authentication, and Security**.  You can work from one of our offices in
** Hamburg, Bremen, or Berlin**. We look forward to receiving your application!  
*
* Key Responsibilities:

**
* ** Identity & Access Management:
** Develop, configure, and operate our central Identity & Access Management platform based on
** Keycloak**, together with your team.
* ** Keycloak Development:
** Build extensions and integrations for Keycloak, adapting the platform to the requirements of our products and international markets.
* ** Authentication & Authorization:
** Design secure and scalable solutions using
** OpenID Connect, OAuth 2.0, Single Sign-On, and Identity Federation**.
* ** API Management:
** Further develop our API Gateway and API Management solutions and integrate them with our identity platform, particularly regarding API security, token validation, and access control.
* ** Platform Reliability:
** Take ownership of the
** stability, scalability, security, and observability
** of our identity platform in production.
* ** Troubleshooting:
** Analyze technical issues and contribute to sustainable solutions for incidents and performance challenges.
* ** Stakeholder

Collaboration:

** Work directly with internal customers, product teams, and international EVENTIM entities to understand requirements and develop suitable technical solutions.
* ** Technical Architecture:
** Actively contribute your expertise to architecture decisions, technical concepts, and reviews.
* ** Knowledge Sharing:
** Support fellow developers through knowledge sharing, code reviews, and technical guidance.  
** What you'll need**:
* ** Several years of solid experience in Java software development**, including working with large-scale, business-critical production systems.
* Practical experience with
** Identity & Access Management (IAM)
** and a strong understanding of the technical and security challenges of modern authentication systems.
* Ideally, extensive hands-on experience with
** Keycloak**, including its architecture, configuration, and particularly its customization and extension capabilities.
* A solid understanding of
** OpenID Connect and OAuth 2.0**, including the underlying authentication flows, tokens, and security concepts.
* Experience with
** API Management and API Gateways**, including their integration with modern authentication and authorization solutions.
* Hands-on experience
** operating distributed applications
** in clustered or cloud environments, with a strong interest in scalability, performance, and observability.
* A strong interest in
** Application Security and Identity Security**, with a security-first mindset throughout design and implementation.
* The ability to explain complex technical concepts clearly and collaborate effectively with developers, architects, product teams, and international stakeholders.
* ** Very good German and good English language skills
** complete your profile.  
** Nice to have:
*** Experience with
** Keycloak customization, SPIs, and extensions
*** Experience with
** Quarkus
* ** Hands-on experience with
** API Gateway technologies**, ideally Open Resty-based solutions such as
** Kong or Apache APISIX
*** Knowledge of
** NGINX, Open Resty, or Lua
** for configuring and extending API Gateways
* Experience with
** Kubernetes and container technologies
*** Experience with
** Terraform/Terragrunt and Infrastructure as Code (IaC)
*** Experience with
** monitoring and observability tools**, such as Grafana Cloud
* Experience with automated
** integration and end-to-end testing
*** Experience with cloud platforms such as
** AWS, Google Cloud, or Azure
*** Familiarity with
** agile software…