Offer summary

Qualifications:

Bachelor’s or Master’s degree in Computer Science, Information Technology, Business Informatics, or a related field., 3-5+ years of proven experience in SSO, particularly with Keycloak., Strong developer skills in Java or Python, with knowledge of SSO protocols like SAML, OIDC, and OAuth., Experience with Infrastructure as Code (IaC) and Kubernetes, along with security assessments and penetration testing..

Key responsabilities:

Ensure the smooth and secure operation of Keycloak infrastructure across over 150 global sites.

Develop and maintain Keycloak and KeycloakExtensions, and drive migration from Ping and EntraID to Keycloak.

Conduct regular security assessments and penetration tests to protect identity systems.

Collaborate with the Site Reliability Engineering (SRE) team to maintain high availability and performance of the Keycloak solution.

Job description

Work Your Magic with us!

Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us.

Your Role: As the primary Single Sign-On (SSO) expert, your daily focus will be ensuring the smooth and secure operation of our Keycloak infrastructure across more than 150 global sites. You'll be the go-to person for all SSO-related matters, proactively identifying and resolving any issues that arise. Your responsibilities will extend to developing and maintaining both closed- and open-source Keycloak and KeycloakExtensions, driving the strategic migration from Ping and EntraID to Keycloak, and conducting regular security assessments and penetration tests to safeguard our identity systems. You will champion continuous improvement within our identity solutions landscape, leveraging modern infrastructure principles like Infrastructure as Code (IaC) and Kubernetes. You'll be instrumental in rolling out our cutting-edge MFA strategy, based exclusively on passkeys. You will also use and interact with our self-developed real-time analytics solution to detect and block identity threats, and collaborate closely with our supportive Site Reliability Engineering (SRE) team to ensure the high availability and performance of our Keycloak solution within our self-hosted, cloud-native ecosystem.

Who You Are

Bachelor’s or Master’s degree in Computer Science, Information Technology, Business Informatics, or a related field
several years (ideally 3-5+ years) of proven experience in SSO, with a strong focus on Keycloak
in-depth understanding of SSO protocols such as SAML, OIDC, and OAuth
strong developer skills, particularly in Java or Python, enabling effective implementation and customization of solutions
knowledge of EntraID and Envoy is highly advantageous
proficient in English; German language skills are a significant plus
demonstrated ability to work independently and collaboratively within a team environment
experience with Infrastructure as Code (IaC) and Kubernetes
experience in conducting or coordinating security assessments and penetration tests

Salary starts at 2.500 EUR and is relevant upon experience.

What we offer: We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We celebrate all dimensions of diversity and believe that it drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress!

Apply now and become a part of our diverse team!

Required profile