Senior Software Developer - Keycloak Identity & Access Management

As a Senior Software Developer, you will work alongside your team to continuously develop and enhance these platforms, shaping essential solutions around Identity & Access Management, Authentication, and Security., * Identity & Access Management: Develop, configure, and operate our central Identity & Access Management platform based on Keycloak, together with your team.

• Keycloak Development: Build extensions and integrations for Keycloak, adapting the platform to the requirements of our products and international markets.
• Authentication & Authorization: Design secure and scalable solutions using OpenID Connect, OAuth 2.0, Single Sign-On, and Identity Federation.
• API Management: Further develop our API Gateway and API Management solutions and integrate them with our identity platform, particularly regarding API security, token validation, and access control.
• Platform Reliability: Take ownership of the stability, scalability, security, and observability of our identity platform in production.
• Troubleshooting: Analyze technical issues and contribute to sustainable solutions for incidents and performance challenges.
• Stakeholder Collaboration: Work directly with internal customers, product teams, and international EVENTIM entities to understand requirements and develop suitable technical solutions.
• Technical Architecture: Actively contribute your expertise to architecture decisions, technical concepts, and reviews.
• Knowledge Sharing: Support fellow developers through knowledge sharing, code reviews, and technical guidance.

• Several years of solid experience in Java software development, including working with large-scale, business-critical production systems.
• Practical experience with Identity & Access Management (IAM) and a strong understanding of the technical and security challenges of modern authentication systems.
• Ideally, extensive hands-on experience with Keycloak, including its architecture, configuration, and particularly its customization and extension capabilities.
• A solid understanding of OpenID Connect and OAuth 2.0, including the underlying authentication flows, tokens, and security concepts.
• Experience with API Management and API Gateways, including their integration with modern authentication and authorization solutions.
• Hands-on experience operating distributed applications in clustered or cloud environments, with a strong interest in scalability, performance, and observability.
• A strong interest in Application Security and Identity Security, with a security-first mindset throughout design and implementation.
• The ability to explain complex technical concepts clearly and collaborate effectively with developers, architects, product teams, and international stakeholders.
• Very good German and good English language skills complete your profile.

Nice to have:

• Experience with Keycloak customization, SPIs, and extensions
• Experience with Quarkus
• Hands-on experience with API Gateway technologies, ideally OpenResty-based solutions such as Kong or Apache APISIX
• Knowledge of NGINX, OpenResty, or Lua for configuring and extending API Gateways
• Experience with Kubernetes and container technologies
• Experience with Terraform/Terragrunt and Infrastructure as Code (IaC)
• Experience with monitoring and observability tools, such as Grafana Cloud
• Experience with automated integration and end-to-end testing
• Experience with cloud platforms such as AWS, Google Cloud, or Azure
• Familiarity with agile software development methodologies

• 30 days of paid vacation plus the option of up to 15 days of unpaid leave
• 25 days of workation within the EU
• Flexible working hours
• Sofa Concerts and employee events
• Discounts on ticket purchases & opportunities for clearing assignments
• Corporate benefits and discounts at KESS
• Central location & subsidy for a Job Ticket or Germany Ticket
• Bike leasing
• Mental health program & company pension scheme
• “GoFluent” language learning platform as well as Lunch & Learn sessions

Our Auth API & API Management team develops and operates central platform services that support EVENTIM’s products across international markets.

A key part of our work is our central Identity & Access Management platform built on Keycloak. It enables secure authentication and Single Sign-On across different products and markets, operating internationally and handling high traffic volumes.

Closely connected to our identity platform are our API Gateway and API Management solutions, which ensure that APIs are exposed securely and reliably. Both areas are tightly integrated, particularly when it comes to authentication, authorization, and API security.