Cleared AWS Authentication SME (Keycloak) - Part-time (Washington, DC)

Virtual Service Operations • Washington, DC

5d • $90,000 - $135,000 • Onsite

About The Position

Virtual Service Operations (VSO) is seeking an experienced AWS Authentication SME specializing in Keycloak for a focused, part-time engagement supporting a mission-critical, security-sensitive initiative. The role owns a critical component of secure identity infrastructure and designs robust authentication and certificate-based access patterns that allow enterprise services to work together securely. The position works with experienced technical partners in a collaborative environment where careful engineering and measurable results matter. It requires regular on-site work at an approved secure facility, with occasional work at authorized customer facilities; it is not remote. The employee must reside within commuting distance of one of the approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO. Active TS/SCI clearance, eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals, and U.S. citizenship are required. VSO describes itself as a virtue-centered team and offers ongoing learning and development opportunities, competitive salaries, health benefits, flexible work arrangements, and benefits for eligible employees related to health, retirement, and professional development.

Requirements

• Deep hands-on experience administering and integrating Keycloak.
• Practical expertise in PKI, certificate lifecycle management, and CAC/smart-card authentication.
• Strong experience with SAML and OIDC federation flows.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
• Active TS/SCI clearance; eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of an approved secure work location in Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• Regular on-site work at an approved secure facility; occasional work at authorized customer facilities may be required.
• U.S. citizenship is required pursuant to a government contract.
• Excellent written and verbal communication skills.
• Ability to work independently while valuing teamwork.
• Excellent problem-solving skills.

Nice To Haves

• Experience integrating enterprise identity sources and complex applications.
• Experience supporting authentication in isolated or highly regulated environments.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Responsibilities

• Design and implement PKI and certificate-based authentication solutions.
• Configure and maintain Keycloak identity federation and synchronization.
• Integrate applications and services using SAML, OpenID Connect, and related standards.
• Troubleshoot identity flows, trust relationships, and secure service access.

Benefits

• Ongoing learning and development opportunities.
• Competitive salaries.
• Health benefits.
• Flexible work arrangements.
• Benefits for eligible employees related to health, retirement, and professional development.

What This Job Offers

• Job Type: Part-time
• Career Level: Senior
• Education Level: No Education Listed