Senior IAM Engineer

We’re looking for a Senior IAM Engineer with 7+ years’ relevant experience to join our Supervisory Workbench team as a key contributor to our continuous delivery squad. You’ll take ownership of Keycloak and IAM implementation across a platform supporting 900+ internal supervision users. This is a hands-on engineering role at the centre of a live, high-impact platform. You’ll be responsible for deploying, configuring, and evolving Keycloak-based IAM solutions on Azure Cloud, while acting as a technical authority on identity and access best practices across the team. Key ResponsibilitiesUpdate, deploy, and configure Keycloak and IAM solutions on Azure CloudImplement Policy-Based Access Control (PBAC) policies, multi-realm Keycloak setups, and SSO/identity federationIntegrate Keycloak Authorisation Services with the new Supervisory Workbench platformCollaborate with cross-functional teams to deliver secure, scalable IAM solutionsProvide technical leadership and guidance on IAM best practices and standardsMust-Have Skills & ExperienceMid-level experience with Keycloak, including hybrid cloud deploymentsStrong proficiency in core IAM concepts and standards: OAuth 2.0, OpenID Connect (OIDC), JWT, On-Behalf-Of (OBO)/Token Exchange, and Fine-Grained AuthorisationProven ability to configure and manage Keycloak realms, clients, and usersExperience working in continuous delivery or agile environmentsNice-to-Have Skills & ExperienceDeep, hands-on experience customising and administering KeycloakSolid development experience in Java/J2EE, including building custom Keycloak extensionsFamiliarity with Azure Cloud services and infrastructureKnowledge of security best practices and compliance requirements in IAM