Senior IAM / IGA Operations Engineer - SFPD
Description
SFPD is strengthening its Identity & Access Management team with a Senior IAM / IGA Operations Engineer. The team manages the availability and evolution of central identity platforms supporting authentication, authorization and identity lifecycle processes. The environment includes Keycloak for IAM and MidPoint for identity governance and administration. The consultant will work in a critical production environment with demanding stability, performance and security requirements.
The assignment combines daily operations, monitoring and incident resolution with full platform lifecycle management. Responsibilities include certificate and database support, root cause analysis, upgrades, migrations and secure configuration. The engineer will also integrate applications and target systems, manage provisioning flows and optimize joiner, mover and leaver processes. Automation, technical documentation, knowledge sharing and coaching are part of the work.
The mission runs full time from 14 December 2026 to 13 December 2027 at Tour du midi in Brussels, with partial teleworking possible. The daily rate is EUR 760–950 excluding VAT, with no broker fee and payment according to contract terms. Candidates need operational IAM/IGA experience, strong platform knowledge, technical troubleshooting skills and the stated interpersonal and language competencies. Selection includes CV screening, a shortlist of three to five candidates, an interview and a final ranking.
Top Reasons to Apply
Critical security infrastructure
Keycloak and MidPoint
End-to-end platform ownership
Automation and scripting
Hybrid Brussels assignment
Detailed Responsibilities and Skills
Additional Responsibilities
- Troubleshoot authentication, authorization and provisioning
- Restart and recover Keycloak / MidPoint platforms
- Identify IAM versus other-system causes and escalate correctly
- Propose and implement structural solutions
- Manage full platform lifecycles
- Execute minor platform upgrades
- Prepare and execute major upgrades and migrations
- Validate installations and configurations across environments
- Configure and maintain Keycloak / MidPoint
- Implement authentication flows, roles, policies and provisioning rules
- Detect and correct configuration security risks
- Define and apply best practices
- Manage and optimize joiner / mover / leaver processes
- Manage roles and access models
- Onboard applications onto IAM platforms
- Integrate applications through OIDC / OAuth2 and SAML
- Integrate target systems (resources) and provisioning flows
- Design and implement installation, configuration and provisioning automation
- Use Groovy, Python and other scripting
- Optimize operational processes
- Create and maintain technical documentation
- Document configurations, processes and incidents
- Share knowledge and coach less experienced colleagues
- Collaborate with infrastructure teams (hosting, HA, security, performance), development teams (integrations, applications) and security stakeholders
- Act as domain technical contact
General skills
- Strong analytical and problem-solving ability.
- A proactive and results-oriented attitude.
- A sense of responsibility and ownership.
- Strong communication skills.
- A team player with a coaching mindset.
- Ability to work independently and make decisions.
- Active knowledge of the other national language; the portal separately lists Dutch and French at active-knowledge level.
- Very good English, specifically for technical communication and documentation; portal lists active knowledge.
Technical skills
- Demonstrable operational experience with IAM and/or IGA platforms.
- Strong knowledge of Keycloak and/or MidPoint; the description allows either platform.
- In-depth knowledge of IDC, OAuth2 and SAML. The source says 'IDC'; OIDC is stated in integration responsibilities, so the apparent discrepancy requires clarification.
- Experience with troubleshooting and root cause analysis.
- Experience with Linux environments.
- Experience with databases, specifically PostgreSQL and MariaDB.
- Experience with integrations and provisioning.
- Experience with security configurations within IAM.
- Experience with platform upgrades and migrations.
Preferred competencies
- Knowledge of LDAP / directory services.
- Experience with automation and scripting, including Groovy, Python and JavaScript.
- Knowledge of high-availability architectures.
- Experience in complex enterprise environments.
Portal role and skill levels — mandatory status not explicitly stated
- Expert IT Security Engineer; most recent experience: any time.
- Automation and technical environment: Junior; most recent experience: any time.
- IAM configuration and security: Expert; most recent experience: any time.
- Incident management and troubleshooting: Expert; most recent experience: any time.
- Integration and provisioning: Expert; most recent experience: any time.
- Keycloak: Confirmed; most recent experience: any time.
- Lifecycle management: Expert; most recent experience: any time.
- MidPoint: Junior; most recent experience: any time.
- Operational management of IAM/IGA platforms: Expert; most recent experience: any time.
Tools and platform context
- Keycloak: IAM authentication and authorization.
- MidPoint: IGA identity lifecycle management.
- PostgreSQL and MariaDB database support.
- TLS and IdP certificates for SAML / OIDC.
- LDAP / directory services are desirable.
- Groovy, Python and JavaScript scripting experience is desirable.
- OIDC / OAuth2 and SAML application integration; technical requirements instead use 'IDC'.