Engineer

• Implement RBAC/ABAC policies and configure multi-realm setups.
• Map Kerberos/IPA identities into Keycloak realms, roles, and clients.
• Configure SSO flows, MFA, and identity federation across hybrid environments.
• Deploy Keycloak on VMs, Docker, and Kubernetes (including OpenShift and GKE).
• Configure Keycloak for OIDC, OAuth2, SAML, LDAP/AD, and Kerberos integration.
• Secure Keycloak with TLS certificates (Vault-issued or enterprise CA).
• Map Keycloak roles to GCP IAM roles for hybrid cloud workload access control.
• Configure multi-tenant setups for on-prem and cloud workloads.
• Integrate Keycloak with Vault for secret management and PKI.
• Configure dynamic secrets for Keycloak DB backends and automate rotation policies.
• Automate Keycloak and Vault deployments using Terraform, Helm, or Ansible.
• Integrate IAM and Vault into CI/CD pipelines for consistent application onboarding.
• Troubleshoot token flows, federation errors, and certificate issues.
• Monitor IAM and Vault services with Prometheus and Grafana.

IAM KeyCloak Engineer

Senior Device Lab Engineer

Project Engineer – Energy Project Delivery

Field Commissioning Engineer – Hybrid Power System

Lead SIEM Engineer

Engineer, Line Project Planning