This is a remote position. IAM KeyCloak Secrets PKI Engineer (PID0647) IAM | Contract / Freelance Contract / Freelance Full-time Remote with travel readiness required (Germany) Start: 01.07.2026 About the role We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector. You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability. What you'll be doing Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles and clients Configuring SSO flows, MFA and identity federation across hybrid cloud and on-premises workloads Deploying Keycloak on VMs, Docker and Kubernetes (OpenShift and bare-metal), configuring OIDC, OAuth2, SAML and Kerberos/LDAP federation Deploy...