DevOps Engineer (IAM) (REF5079J)

Stack

Responsibilities

• ▹Develop and operate Keycloak/RHSSO-based IAM capabilities on Kubernetes, enabling secure SSO and machine-to-machine access for internal products
• ▹Support team development by standardizing deployment, configuration, and troubleshooting practices
• ▹Continuously improve reliability, security, and automation around the IAM platform
• ▹Diagnose and resolve platform issues (CPU/memory pressure, pod health, configuration errors)
• ▹Contribute to incident response, support upgrades and migrations

Requirements

• ▹At least 3 years of experience as DevOps / Platform Engineer (or SRE) with hands-on Kubernetes operations in production environments
• ▹Solid understanding of OAuth 2.0 and OpenID Connect concepts for IAM integrations and SSO flows
• ▹Practical experience with GitOps delivery using Argo CD
• ▹Experience with containers (Docker) and CI/CD pipelines (e.g. GitLab) from commit to production
• ▹Comfortable scripting in Python and Bash for automation and troubleshooting
• ▹IAM fundamentals: authentication vs authorization, identity lifecycle and provisioning flows, role/permission model design, user types, machine-to-machine concepts
• ▹Hands-on Keycloak/RHSSO experience: realms, clients, roles, scopes, identity providers, themes; troubleshooting authentication and authorization flows end-to-end
• ▹Configuration-as-code mindset for Keycloak: managing realms/clients/roles via versioned configuration, promoting changes across environments
• ▹Kubernetes & networking experience: deployments, services, ingress, environment-specific configuration, secure handling of secrets/config maps
• ▹Helm charts and Argo CD application management, including Helm-based deployments through Argo CD
• ▹CI/CD experience using GitLab, building, testing, and deploying containerized workloads
• ▹Infrastructure as Code approach for managing environments and application infrastructure
• ▹Observability experience: Grafana/Prometheus, ELK stack, basic Dynatrace usage
• ▹Experience with PostgreSQL in operational contexts (backups/restore, basic performance indicators, connection troubleshooting)
• ▹General understanding of how Keycloak and IAM components rely on Postgres and typical failure modes
• ▹Experience with OAuth 2.0, OpenID Connect, JWT-based authentication for Keycloak integrations
• ▹Understanding of TLS/certificates and secure exposure of IAM endpoints
• ▹Experience using monitoring and load-testing tools (Prometheus/Grafana, JMeter) to observe performance, capacity, and stability

Nice to have

• ▹Hands-on experience running Keycloak using an operator-based approach on Kubernetes/OpenShift
• ▹Deeper Postgres operational know-how (performance tuning, HA setups, maintenance strategies)
• ▹Experience in cloud technologies (AWS, Azure, or Google Cloud)
• ▹Experience in Go, Java and/or Quarkus for maintaining operators, provisioning logic, or SPI-based extensions
• ▹Experience working in international projects
• ▹Degree in Computer Science, Mathematics or Engineering

About the company

The largest ICT employer in Hungary, Deutsche Telekom IT Solutions (formerly IT-Services Hungary, ITSH) is a subsidiary of the Deutsche Telekom Group. Established in 2006, the company provides a wide portfolio of IT and telecommunications services with more than 5000 employees. ITSH was awarded the Best in Educational Cooperation prize by HIPA in 2019, acknowledged as one of the most attractive workplaces by PwC Hungary's independent survey in 2021, and rewarded with the title of the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team.