Senior IAM / IGA Operations Engineer

About the mandate

You join the Identity & Access Management team of a large organisation. The team manages the central identity platforms that support authentication, authorisation and identity lifecycle. The environment includes Keycloak for authentication and authorisation and MidPoint for identity lifecycle management. This is a critical production environment with high demands on stability, performance and security. You take on a key role in the operational management, troubleshooting and lifecycle management of these platforms, working closely with infrastructure and development teams and security stakeholders. You are the technical point of contact within the domain and you coach less experienced colleagues. The assignment runs for 12 months from 14/12/2026 and takes place in Brussels, with the option to work partly remotely.

Responsibilities

• Carry out daily operational tasks on the IAM and IGA platforms, including monitoring, alerts, log analysis and management of TLS and IdP certificates
• Analyse and resolve incidents, perform root cause analyses and escalate problems correctly or fix them structurally
• Handle the full lifecycle management of the platforms: minor and major upgrades, migrations and validation across environments
• Configure and maintain Keycloak and MidPoint, including authentication flows, roles, policies and provisioning rules
• Detect and correct security risks in configurations and apply best practices
• Manage and optimise joiner/mover/leaver processes, roles and access models
• Onboard and integrate new applications via OIDC, OAuth2 and SAML, and connect target systems via provisioning flows
• Design automations using scripting (Groovy, Python) and write and share technical documentation within the team

Must-haves

• Demonstrable experience with IAM and/or IGA platforms in an operational context
• Advanced in Keycloak and/or MidPoint
• Advanced in OIDC, OAuth2 and SAML
• Experience with troubleshooting and root cause analysis
• Experience with Linux environments and databases (PostgreSQL, MariaDB)
• Experience with integrations, provisioning and security configurations within IAM
• Experience with platform upgrades and migrations
• Active knowledge of the other national language and very good knowledge of English, specifically for technical communication and documentation

Nice-to-haves

• Knowledge of LDAP and directory services
• Experience with automation and scripting (Groovy, Python, JavaScript)
• Knowledge of high availability (HA) architectures
• Experience in complex enterprise environments

What the employer offers

• 12-month assignment in a critical enterprise environment
• Based in Brussels
• Option to work remotely part-time