AWS Authentication SME (Keycloak) - Part-time

Virtual Service Operations • Herndon, VA

6d • $90,000 - $115,000 • Onsite

About The Position

Virtual Service Operations (VSO) is seeking an experienced AWS Authentication SME (Keycloak) for a focused, part-time engagement supporting a mission-critical, security-sensitive initiative. The role owns a critical part of secure identity infrastructure, designing robust authentication and certificate-based access patterns that enable enterprise services to work together securely. The engineer will collaborate with experienced technical partners in a careful, results-oriented environment.

The position is on-site, not remote. The employee must reside within commuting distance of an approved secure work location in Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO. Regular on-site work in an approved secure facility and occasional work at authorized customer facilities may be required. The position requires an active TS/SCI clearance, eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals, and U.S. citizenship pursuant to a government contract.

Requirements

• Deep hands-on experience administering and integrating Keycloak.
• Practical expertise in PKI, certificate lifecycle management, and CAC/smart-card authentication.
• Strong experience with SAML and OIDC federation flows.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
• Active TS/SCI clearance; eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• U.S. citizenship is required pursuant to a government contract.
• Excellent written and verbal communication, ability to work independently and as part of a team, and strong problem-solving skills.

Nice To Haves

• Experience integrating enterprise identity sources and complex applications.
• Experience supporting authentication in isolated or highly regulated environments.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Responsibilities

• Design and implement PKI and certificate-based authentication solutions.
• Configure and maintain Keycloak identity federation and synchronization.
• Integrate applications and services using SAML, OpenID Connect, and related standards.
• Troubleshoot identity flows, trust relationships, and secure service access.

Benefits

• Ongoing learning and development opportunities.
• Competitive salaries.
• Health benefits.
• Flexible work arrangements.
• Eligible employees may receive benefits related to health, retirement, and professional development.

What This Job Offers

• Job Type: Part-time
• Career Level: Senior
• Education Level: No Education Listed