IAM KeyCloak Secrets PKI Engineer (PID0647)

This is a remote position.

IAM KeyCloak Secrets PKI Engineer (PID0647) IAM | Contract / Freelance

• Contract / Freelance
  
• Full-time
  
• Remote with travel readiness required (Germany)
  
• Start: 01.07.2026
  
• Duration: 6-12 months (further extensions likely)

About the role

We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector. You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability.

What you'll be doing

• Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles a...