Senior IAM / SSI Integration Engineer (SSI)

🔥 Senior IAM / SSI Integration Engineer

We are looking for a Senior IAM Integration Engineer to integrate SSI / Verifiable Credential solutions with existing authentication and authorization infrastructure.
📍 Location: EU
🏠 Format: Remote
🇬🇧 Language: English
🇩🇪 German is a strong advantage

MUST HAVE
— Strong hands-on experience with Keycloak and/or Zitadel
— Experience with realm / tenant configuration
— Experience with custom claims, protocol mappers, extensions or plugin development
— Strong knowledge of OAuth 2.0 and OpenID Connect
— Experience with:
— Authorization Code + PKCE
— Client Credentials
— Token introspection
— Strong knowledge of JWT / JWKS
— Experience with token lifecycle, validation and revocation
— Experience integrating Verifiable Credentials into IAM / authentication flows
— Ability to map VC attributes into OIDC claims, roles, permissions and internal identity models
— Strong understanding of authentication, authorization and identity federation
— Experience with REST APIs and backend integrations
— Strong customer-facing and consulting skills

Responsibilities
— Integrate SSI / VC solutions with existing IAM platforms
— Configure and extend Keycloak / Zitadel environments
— Implement custom claims and protocol mappings
— Develop or configure plugins / extensions where required
— Map Verifiable Credential attributes into OIDC-based identity models
— Implement secure authentication and authorization flows
— Handle JWT validation, JWKS and token lifecycle logic
— Integrate IAM components with backend applications and services
— Support architecture and security discussions
— Work closely with SSI / Digital Identity consultants and development teams
— Participate in customer workshops and technical presentations

Nice to Have
— Experience with EUDI Wallet / EUDI ARF
— Knowledge of OpenID4VCI / OpenID4VP
— Experience with Hydra / Dex or similar identity components
— SSI / Digital Identity project experience
— German language

The ideal candidate is a strong IAM engineer who can combine hands-on Keycloak/Zitadel expertise with SSI / Verifiable Credential integration knowledge and confidently work with customer stakeholders.