AWS Authentication SME (Keycloak)

Description

Are you ready to put your AWS expertise to work on cloud challenges that few engineers get the chance to tackle?

Our partner is seeking an experienced AWS Authentication SME (Keycloak) to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. Own a critical piece of secure identity infrastructure on a focused, part-time engagement. You will design robust authentication and certificate-based access patterns that allow enterprise services to work together securely. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.

The program you will be supporting is a highly classified, mission-critical modernization initiative. Your roles will be to help build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies.

Key Responsibilities:

Design and implement PKI and certificate-based authentication solutions.
Configure and maintain Keycloak identity federation and synchronization.
Integrate applications and services using SAML, OpenID Connect, and related standards.
Troubleshoot identity flows, trust relationships, and secure service access.

Qualifications:

Deep hands-on experience administering and integrating Keycloak.
Practical expertise in PKI, certificate lifecycle management, and CAC/smart-card authentication.
Strong experience with SAML and OIDC federation flows.
Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Preferred Qualifications:

Experience integrating enterprise identity sources and complex applications.
Experience supporting authentication in isolated or highly regulated environments.
Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Requirements:

Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
Must reside within commuting distance of one of the following 4 approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
Regular on-site work in an approved secure facility and occasional work at authorized customer facilities may be required. This is not a remote position.
Part-time position, on-site
Please note that pursuant to a government contract, this specific position requires U.S. citizenship status

AWS Authentication SME (Keycloack)