DevOps Engineer (IAM)

Stack

Responsibilities

• ▹Develop and operate Keycloak/RHSSO-based IAM capabilities on Kubernetes, enabling secure SSO and machine-to-machine access for internal products
• ▹Support team development by standardizing deployment, configuration, and troubleshooting practices
• ▹Continuously improve reliability, security, and automation around the IAM platform

Requirements

• ▹At least 3 years of work experience as DevOps / Platform Engineer (or SRE) with hands-on Kubernetes operations in production environments
• ▹Solid understanding of OAuth 2.0 and OpenID Connect concepts for modern IAM integrations and SSO flows
• ▹Practical experience with GitOps delivery using Argo CD
• ▹Experience working with containers (Docker) and CI/CD pipelines (e.g. GitLab) from commit to production
• ▹Comfortable scripting in Python and Bash for automation and troubleshooting tasks
• ▹IAM fundamentals: authentication vs authorization, identity lifecycle and provisioning flows, role/permission model design, user types, and machine-to-machine concepts
• ▹Keycloak/RHSSO: hands-on experience with realms, clients, roles, scopes, identity providers, and themes, including troubleshooting authentication and authorization flows end-to-end
• ▹Configuration-as-code mindset for Keycloak: managing realms/clients/roles via versioned configuration and promoting changes across environments
• ▹Operability: diagnose and resolve platform issues (CPU/memory pressure, pod health, configuration errors), contribute to incident response, and support upgrades and migrations
• ▹Kubernetes & networking: experience with deployments, services, ingress, environment-specific configuration, and secure handling of secrets/config maps
• ▹Packaging & delivery: Helm charts and Argo CD application management, including Helm-based deployments through Argo CD for GitOps workflows
• ▹Experience in CI/CD using GitLab, including building, testing, and deploying containerized workloads
• ▹Infrastructure as Code (IaC) approach for managing environments and application infrastructure
• ▹Observability: experience with Grafana/Prometheus, ELK stack, and basic Dynatrace usage for monitoring, alerting, and troubleshooting
• ▹Experience with PostgreSQL in operational contexts (backups and restore, basic performance indicators, connection troubleshooting)
• ▹General understanding of how Keycloak and IAM components rely on Postgres and what typical failure modes look like
• ▹Experience with OAuth 2.0, OpenID Connect, and JWT-based authentication for Keycloak integrations
• ▹Understanding of TLS/certificates and secure exposure of IAM endpoints
• ▹Experience using monitoring and load-testing tools (e.g. Prometheus/Grafana, JMeter) to observe performance, capacity, and stability of IAM services

Nice to have

• ▹Hands-on experience running Keycloak using an operator-based approach on Kubernetes/OpenShift
• ▹Deeper Postgres operational know-how (performance tuning, HA setups, maintenance strategies)
• ▹Experience in cloud technologies (AWS, Azure, or Google Cloud)
• ▹Experience in Go, Java and/or Quarkus for maintaining operators, provisioning logic, or SPI-based extensions
• ▹Experience working in international projects

About the company

Deutsche Telekom IT Solutions (formerly IT-Services Hungary, ITSH) is the largest ICT employer in Hungary and a subsidiary of the Deutsche Telekom Group, established in 2006. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees, serving hundreds of large corporate customers in Germany and other European countries. DT-ITS received the Best in Educational Cooperation award from HIPA in 2019 and was also recognised as the Most Ethical Multinational Company that year. The company continuously develops its four sites in Budapest, Debrecen, Pecs and Szeged and is looking for skilled IT professionals to join its team. The team works on a large-scale project supporting 30 million customers: a set of applications and websites covering end-to-end fiber processes - pre-ordering, ordering, installation, service management and customer support.