Senior IAM / SSI Integration Engineer
Что предстоит делать
We are seeking a Senior IAM / SSI Integration Engineer to lead the integration of Self‑Sovereign Identity (SSI) and Verifiable Credential solutions with leading IAM platforms such as Keycloak and Zitadel. The role involves configuring realms and tenants, developing custom claims, protocol mappers, extensions or plugins, and ensuring secure authentication flows that comply with OAuth 2.0, OpenID Connect, JWT/JWKS standards. The engineer will map VC attributes into OIDC claims, roles, permissions and internal identity models, manage token lifecycle, validation and revocation, and integrate IAM components with backend services via REST APIs. The position is remote, based in the EU, and requires fluency in English with German as a strong advantage. Candidates should have strong customer‑facing and consulting skills, experience with SSI/Verifiable Credentials, and a deep understanding of authentication, authorization, and identity federation. Nice to have experience with EUDI Wallet, OpenID4VCI/VP, Hydra/Dex, and other identity components.
Что мы ждём от кандидата
- Strong hands‑on experience with Keycloak and/or Zitadel
- Experience with realm / tenant configuration
- Experience with custom claims, protocol mappers, extensions or plugin development
- Strong knowledge of OAuth 2.0 and OpenID Connect
- Experience with Authorization Code + PKCE
- Experience with Client Credentials
- Experience with Token introspection
- Strong knowledge of JWT / JWKS
- Experience with token lifecycle, validation and revocation
- Experience integrating Verifiable Credentials into IAM / authentication flows
- Ability to map VC attributes into OIDC claims, roles, permissions and internal identity models
- Strong understanding of authentication, authorization and identity federation
- Experience with REST APIs and backend integrations
- Strong customer‑facing and consulting skills
Что предлагаем
- Remote work from EU
- English required, German advantage
О Deffic
Работодатель свяжется с вами через контакты из профиля.