Senior IAM / Keycloak Architect

About the Position

We are looking for a Senior IAM / Keycloak Architect to join Al Hilal team. Al Hilal Bank is a Shariah-compliant digital bank that’s revolutionising the way you bank. We believe in life beyond banking and offer you and the family a personalised, convenient, and tailored experience that meets your banking and lifestyle needs seamlessly in one holistic app, the Al Hilal Digital app. Our innovative banking offering is unparalleled in the market as we are proudly part of the ADCB Group.

Responsibilities

• Define and own enterprise Identity and Access Management architecture, standards, and technical roadmaps.
• Design scalable authentication, authorization, federation, SSO, MFA, and API security solutions using Keycloak.
• Lead Keycloak platform architecture, including setup from scratch, configuration, customization, administration, and enterprise deployment design.
• Design highly available, resilient, and scalable Keycloak deployments across Kubernetes / OpenShift and cloud environments.
• Define multi-realm, multi-tenant, and enterprise federation architectures.
• Design advanced authentication flows, including adaptive authentication, step-up authentication, passwordless authentication, and MFA strategies.
• Lead IAM platform modernization and consolidation initiatives.
• Collaborate with architecture, security, engineering, and business teams to ensure solutions are aligned with security, compliance, and business requirements.
• Conduct architecture reviews and produce architecture artifacts, solution design documents, technical roadmaps, and implementation guidelines.
• Support development teams with solution design, Jira task creation, technical reviews, and implementation guidance.
• Integrate IAM solutions with Java / Spring Boot applications, Spring Security, REST APIs, and microservices.

Requirements

• 10+ years of experience in IAM, application security, or identity platform architecture.
• Strong hands-on expertise with Keycloak, including setup from scratch, configuration, customization, administration, and platform design.
• Strong experience with Java, Spring Boot, and Spring Security.
• Experience building and securing RESTful APIs and microservices.
• Deep knowledge of OAuth 2.0, OpenID Connect, SAML 2.0, JWT, SSO, MFA, federation, and API security.
• Experience with Keycloak SPI development, custom authenticators, and custom authentication flows.
• Experience integrating Keycloak with LDAP and Active Directory.
• Strong understanding of Docker, Kubernetes, OpenShift, and cloud-based deployments.
• Experience designing IAM solutions for large-scale platforms supporting millions of users.
• Experience designing High Availability and Disaster Recovery architectures for IAM platforms.
• Ability to define authentication, authorization, federation, API security, and secrets management architecture.
• Experience conducting architecture reviews and producing architecture artifacts, solution design documents, architecture diagrams, and implementation guidelines.
• Experience working in Agile environments.
• Strong attitude of ownership: ability to lead solutioning, create Jira tasks, prepare design documents, review solutions with architects, and present them to development teams.
• Banking, fintech, payments, or regulated enterprise experience would be a strong advantage.

We Offer

• Opportunity to work with a leading digital bank in the ADCB Group.
• Remote work options.
• Professional growth and development opportunities.

About the Company

Al Hilal Bank is a Shariah-compliant digital bank that’s revolutionising the way you bank. We believe in life beyond banking and offer you and the family a personalised, convenient, and tailored experience that meets your banking and lifestyle needs seamlessly in one holistic app, the Al Hilal Digital app. Our innovative banking offering is unparalleled in the market as we are proudly part of the ADCB Group.