Senior IAM IGA Operations Engineer

Mission Overview

Keystone Solutions is seeking a Senior IAM / IGA Operations Engineer for a consultancy mission at a client site. The IAM team is responsible for the management, availability, and evolution of central identity platforms within the organization. These platforms are a critical part of the security infrastructure, supporting authentication, authorization, and identity lifecycle processes.

Key Responsibilities

The consultant will carry out the following responsibilities under Keystone Solutions' consultancy model:

• Operational Management:
  • Perform daily operational tasks on IAM and IGA platforms.
  • Monitor the IAM stack and follow up on alerts.
  • Analyze and interpret logs (Keycloak, MidPoint, infrastructure).
  • Manage TLS certificates and IdP certificates (SAML / OIDC).
  • Work with and support databases (PostgreSQL, MariaDB).
  • Actively contribute to the stability and performance of the platforms.
• Incident Management & Troubleshooting:
  • Analyze and resolve incidents and technical issues.
  • Conduct in-depth root cause analyses.
  • Troubleshoot authentication, authorization, and provisioning issues.
  • Restart and recover platforms (Keycloak / MidPoint) during incidents.
  • Identify the correct cause (IAM vs other systems) and escalate appropriately.
  • Propose and implement structural solutions.
• Lifecycle Management:
  • Manage the full lifecycle of the platforms.
  • Perform minor upgrades.
  • Prepare and execute major upgrades and migrations.
  • Validate installations and configurations across different environments.
• Configuration & Security:
  • Configure and maintain Keycloak and MidPoint.
  • Implement authentication flows, roles, policies, and provisioning rules.
  • Detect and correct security risks in configurations.
  • Define and apply best practices.
• Integration & Provisioning:
  • Manage and optimize joiner/mover/leaver processes.
  • Manage roles and access models.
  • Onboard new applications on IAM platforms.
  • Integrate applications via OIDC / OAuth2 and SAML.
  • Integrate with target systems (resources) and provisioning flows.
• Automation:
  • Design and implement automations (installation, configuration, provisioning).
  • Utilize scripting (Groovy, Python, etc.).
  • Optimize operational processes.
• Documentation & Knowledge Sharing:
  • Prepare and maintain technical documentation.
  • Document configurations, processes, and incidents.
  • Share knowledge within the team and coach less experienced profiles.
• Collaboration:
  • Work closely with infrastructure teams (hosting, HA, security, performance), development teams (integrations and applications), and security stakeholders.
  • Act as a technical point of contact within the domain.

Technical Competencies

The consultant must have the following competencies:

• Proven experience with IAM and/or IGA platforms in an operational context.
• Strong knowledge of Keycloak and/or MidPoint.
• In-depth knowledge of IDC, OAuth2, SAML.
• Experience with:
  • Troubleshooting and root cause analysis.
  • Linux environments.
  • Databases (PostgreSQL, MariaDB).
• Experience with:
  • Integrations and provisioning.
  • Security configurations within IAM.
  • Upgrades and migrations of platforms.

Generic Competencies

• Strong analytical and problem-solving skills.
• Proactive and results-oriented attitude.
• Sense of responsibility and ownership.
• Strong communication skills.
• Team player with a coaching mindset.
• Able to work independently and make decisions.

Languages

Active knowledge of the other national language and very good knowledge of English, specifically in the domain of technical communication and documentation.

Selection Process

After receiving CVs, they will be analyzed, and a shortlist of 3-5 candidates will be created based on the criteria defined in the ProUnity contract. These candidates will then be invited for an interview where their technical and generic competencies, as well as their language skills, will be evaluated. A ranking will be established afterward.

The place of employment is Brussels. We offer the possibility of part-time teleworking.

Duration: 14/12/2026 - 13/12/2027 12 months • (full time)

Skills required

• Automatisatie en technische omgevingJunior
• IAM-configuratie en beveiligingExpert
• Incidentmanagement en troubleshootingExpert
• Integratie en provisioningExpert
• KeycloakConfirmed
• LifecyclemanagementExpert
• MidPointJunior
• Operationeel beheer van IAM/IGA-platformenExpert

Language requirements

• DutchActive knowledge
• EnglishActive knowledge
• FrenchActive knowledge