Senior DevOps Engineer- IAM m f d

Purpose

Senior DevOps Engineer is responsible for entire lifecycle of Continuous Integration/Continuous Deployment pipelines and Infrastructure as Code approaches. Takes account and defines automated configuration management, release management, build, test and deployment activities. Provides prototypes and concepts for further automation of assigned technology.

Project Introduction

Join our International Team and help us to create greenfield software for one of the biggest and most important project in Deutsche Telekom Group. Being part of our team, you will have an impact on our 30 million Customers, who will use our product to request Fiber network to their homes and to track our progress of installation.

Our product is a set of applications and websites to support end-to-end processes covering areas: Fiber pre-ordering, ordering, installation, service management & customer support.

Your role as IAM DevOps engineer

Your role will be to develop and operate Keycloak/RHSSO-based IAM capabilities on Kubernetes, enabling secure SSO and machine-to-machine access for internal products.

You will support team development by standardizing deployment, configuration, and troubleshooting practices, continuously improving reliability, security, and automation around the IAM platform.

Your profile

• At least 3 years of work experience as DevOps / Platform Engineer (or SRE) with hands-on Kubernetes operations in production environments.
• Solid understanding of OAuth 2.0 and OpenID Connect concepts for modern IAM integrations and SSO flows.​
• Practical experience with GitOps delivery using Argo CD (Git-driven continuous delivery for Kubernetes).​
• Experience working with containers (Docker) and CI/CD pipelines (e.g. GitLab) from commit to production.
• Comfortable scripting in Python and Bash for automation and troubleshooting tasks.

IAM, Keycloak & troubleshooting

• IAM fundamentals: authentication vs authorization, identity lifecycle and provisioning flows, role/permission model design, user types, and machine-to-machine concepts.
• Keycloak/RHSSO: hands-on experience with realms, clients, roles, scopes, identity providers, and themes, including troubleshooting authentication and authorization flows end-to-end.
• Configuration-as-code mindset for Keycloak: managing realms/clients/roles via versioned configuration and promoting changes across environments.
• Operability: diagnose and resolve platform issues (CPU/memory pressure, pod health, configuration errors), contribute to incident response, and support upgrades and migrations.

Cloud, DevOps & Containerization

• Kubernetes & networking: experience with deployments, services, ingress, environment-specific configuration, and secure handling of secrets/config map