12 melhores vagas de engineer ci/cd (Contratando agora!)

IAM KeyCloak Secrets PKI Engineer (Full remote)
Bridge 351 —1950 Lisboa
- Período Integral
- Teletrabalho
- Mestrado
2 h
Platform Engineer Tech Lead
Euronext —Porto
- Período Integral
- Mestrado
Senior Data Engineering Consultant
Advancing Analytics —Lisboa
- Teletrabalho
Candidatura rápida
Head of Software Engineering
Bloq.it —1990 Lisboa
- Modelo Híbrido
Senior Data Engineer
SBM Offshore —4100 Porto
- Mestrado
- Graduação
Head of Engineering
BrainRocket —Lisboa
- Modelo Híbrido
- Mestrado
Senior Data Scientist - Lisbon/Porto
BNP Paribas —Porto
- Período Integral
- Modelo Híbrido
SALESFORCE COMMERCE CLOUD FULLSTACK SENIOR ENGINEER
Sonae MC —Porto
- Período Integral
- Graduação
Há 5 dias
Azure DevOps Lead | Insurance
Bridge 351 —1950 Lisboa
Senior Data Solutions Architect for Data Products Architecture (m/f/d)
Kuehne+Nagel —Porto
- Modelo Híbrido
Developer Backend ( Administrateur Bases de Données - Senior) - DBA
Inetum Portugal —Lisboa
- Período Integral
- Modelo Híbrido
Candidatura rápida
Senior Platform Engineer
Movilges IT Consulting —Lisboa
- Teletrabalho
- Graduação
Candidatura rápida
1 h

Other jobs to consider

Find your next job by exploring related positions.

Industrial Engineer
360imprimir —Lisboa
Licenciatura nas áreas de Engenharia ou equivalente. Conhecimento de metodologias de desenvolvimento ágeis ( Scrum, Kanban, etc.).
Suporte Técnico / IT Support (Service Desk / Help Desk) | Lisboa, Portugal | Presencial / Híbrido
Xtedder —Lisboa
Experiência mínima de *2 anos em funções de Suporte IT (Service Desk / Help Desk / IT Support)*. Experiência em *resolução e gestão de incidentes em ambiente…
Candidatura rápida
Há 10 dias

Quero receber o alerta de ofertas mais recentes para engineer ci/cd

Ao iniciar sessão na sua conta, concorda com os Termos de Serviço do SimplyHired e consente com a nossa Política de Privacidade e Cookies.

IAM KeyCloak Secrets PKI Engineer (Full remote)

Bridge 351
1950 Lisboa

Candidate-se agora

Detalhes da oferta

Período Integral
Há 2 horas

Qualificações

Mestrado

Descrição completa da oferta

IAM KeyCloak Secrets PKI Engineer

️ About the Role

Weare looking for an IAM PKI Engineer to join its internal platform team. In this role, you will design, implement and operate Identity & Access Management services — including Keycloak, HashiCorp Vault and PKI infrastructure — working closely with the EDP IAM team in an agile, sprint-based delivery environment.

️ Key Responsibilities

Implement and maintain Keycloak deployments on VMs, Kubernetes (OpenShift, bare-metal, GKE) and Docker, including OIDC, OAuth2, SAML and Kerberos/LDAP federation.
Configure RBAC/ABAC policies, multi-realm and multi-tenant setups across hybrid cloud and on-prem workloads.
Integrate Keycloak with IPA/LDAP/AD for identity sync, and with Google Identity as an IdP or broker.
Deploy and operate HashiCorp Vault in production on Linux-based systems, including HA clusters, Raft storage, seal/unseal mechanisms (Shamir, HSM, cloud KMS).
Configure Vault for securing Keycloak operational secrets, implementing dynamic secrets and secret rotation policies.
Set up and manage the Vault PKI secrets engine: internal CAs, intermediates, short-lived certificate issuance, CRL/OCSP, and automated revocation.
Integrate PKI with enterprise services such as Kubernetes ingress controllers, load balancers, web servers and VPNs.
Automate deployment and configuration of Keycloak and Vault using Terraform, Helm and/or Ansible, following IaC and GitOps practices.
Work on CI/CD integration (GitHub Actions, GitLab CI, Jenkins) for certificate and secret distribution.
Monitor both platforms with Prometheus and Grafana; handle incident response for expired certificates, Vault unseal failures and IPA migration issues.

Mandatory Qualifications

Bachelor's or Master's degree in Computer Science, Information Security, Systems Engineering or a related field.
In the absence of a degree in a relevant field, demonstrated equivalent professional experience of at least 6 years will be accepted.

Mandatory Experience

Strong hands-on knowledge of authentication and authorisation protocols: OIDC, OAuth2, SAML, Kerberos and LDAP.
Proven experience deploying and managing Keycloak on VM and/or Kubernetes environments.
Demonstrated experience with HashiCorp Vault in production: HA clusters, Raft storage, seal/unseal configuration (KMS/HSM) and PKI secrets engine operations.
Experience managing PKI infrastructure: intermediate CAs, role definitions, short-lived certificate issuance, CRLs and automated revocation.
Experience automating certificate lifecycle management via Vault Agent, API or CI/CD pipelines, including rotation policies and revocation.
Experience integrating PKI with enterprise systems (Kubernetes ingress, load balancers, VPN, S/MIME, databases).
Hands-on experience with Terraform, Helm and/or ArgoCD for infrastructure automation.
Experience with Prometheus and Grafana for monitoring; ability to troubleshoot unseal, auth and CRL issues and perform backup & restore.

Preferred Experience

Experience deploying Keycloak on GCP/GKE, including integration with Google Identity and mapping Keycloak roles to GCP IAM roles.
Knowledge of advanced PKI topics: ACME v2 (DNS-01 + EAB), EST for devices, AIA/CRL/OCSP publishing and stapling, RFC 5280 profiles, SAN encoding and RA delegation.
Experience with RBAC, audit devices, HSM/KMS for key protection and security compliance practices.
Familiarity with post-quantum cryptography (PQC) pilots.
Fluent in German.
Experience working in Scrum or other agile frameworks.

Languages

Fluent English (written and spoken).

Location & Work Model

Remote - Occasional travel required.
Full-Time

Candidate-se agora

Refine sua pesquisa

engineer ci/cd vagas

IAM KeyCloak Secrets PKI Engineer (Full remote)

Platform Engineer Tech Lead

Senior Data Engineering Consultant

Head of Software Engineering

Senior Data Engineer

Head of Engineering

Senior Data Scientist - Lisbon/Porto

SALESFORCE COMMERCE CLOUD FULLSTACK SENIOR ENGINEER

Azure DevOps Lead | Insurance

Senior Data Solutions Architect for Data Products Architecture (m/f/d)

Developer Backend ( Administrateur Bases de Données - Senior) - DBA

Senior Platform Engineer

Other jobs to consider

Quero receber o alerta de ofertas mais recentes para engineer ci/cd

Related Searches

Ferramentas para Candidatos

Ferramentas da empresa

Procurar

Mantenha-se em Contacto