Keycloak Architect

Job Title: Keycloak Architect

Remote

• Lead the design and implementation of Keycloak-based authentication, applying industry best practices and avoiding unnecessary rework.
• Build authentication capabilities for reusability, so that existing POC investments are preserved and extended rather than discarded.
• Implement and harden in-scope authentication features at the Keycloak layer, including support for social login, passwordless sign-in, and passkeys (WebAuthn/FIDO2).
• Collaborate with the existing 8-member identity team that owns session management, SSO, MFA, and forgot-password flows, ensuring Keycloak integrations are consistent and well-aligned.
• Support two distinct delivery tracks — web and mobile — recognizing that each has different implementation paths and is being treated separately.
• Enable the mobile path''s evolution: support an initial WebView-based approach and a planned migration toward native identity functionality as the mobile API and App Services layer mature.
• Design identity solutions that remain adaptable as the surrounding architecture evolves, keeping reusability and future-proofing as primary priorities.
• Reduce the team''s POC overhead by providing experienced guidance, reference implementations, and reusable patterns.
• Document configurations, integration patterns, and decisions so knowledge is retained and transferable.