Site Reliability Engineer IAM - F/H/N

Job summary

Operate and improve Keystone, the Public Cloud identity service that authenticates API calls and controls entry to APIs. The role focuses on high availability, multi-region consistency, authentication latency, seamless migrations, identity federation, and secure authorization policies, while maintaining service-level objectives and on-call operations. The technical environment includes Python, Go, Linux, OIDC, SAML, LDAP, Helm, Terraform, and CI/CD pipelines.

Benefits

Qualifications

• Strong knowledge of identity authentication, authorization, and federation using OIDC, SAML, or LDAP
• Experience with multi-project and multi-region RBAC models
• Solid experience operating critical, stateful distributed services in production
• Ability to maintain and develop software in Python and Go
• Strong Linux and automation skills
• Experience designing highly available architectures using infrastructure as code and resilience testing
• Proficiency with Helm, Terraform, CI/CD pipelines, Git-based tools, and automated security checks
• Understanding of security, compliance, and traceability in public cloud environments
• Professional English proficiency at B2 level or higher
• OpenStack Keystone or another identity provider operated in production is an advantage

Responsibilities

• Operate and improve Keystone, ensuring high availability, multi-region consistency, low authentication latency, and seamless migrations
• Manage fine-grained permissions, project, domain, and region scopes, and identity federation
• Automate authorization policies through policy as code, testing, and regression checks
• Support API ingress access controls, application filtering, WAF, and threat detection
• Maintain service operations, SLOs, and on-call coverage while automating operational tasks
• Uphold DevOps standards for code quality, testing, documentation, and traceability

Skills

Languages

Work schedule

Industry

Relocation