IAM / SSI Integration Engineer

• Strong hands-on experience with Zitadel and/or Keycloak, including realm/tenant configuration, custom claim/protocol mappers, and extensions or plugin development
• Strong knowledge of OpenID Connect (OIDC) and OAuth 2.0, including Authorization Code + PKCE, Client Credentials, and token introspection
• Experience integrating Verifiable Credentials (VC) into IAM and authentication/authorization flows
• Ability to map VC attributes/claims to OIDC claims and existing identity models
• Experience with JWT validation, JWKS/key management, token lifecycle, and revocation
• Good understanding of identity federation, authentication, and authorization architectures
• Experience with REST APIs and integration of IAM components with backend applications/services

Nice to have:

• Familiarity with the EUDI Wallet Architecture and Reference Framework (EUDI ARF) or comparable SSI / Digital Identity frameworks
• Knowledge of OpenID4VCI / OpenID4VP and related Verifiable Credential protocols
• Experience with Hydra/Dex or comparable identity components
• German language skills

• Integrate SSI / Verifiable Credential solutions with existing IAM and authentication infrastructures
• Configure realms/tenants in Zitadel and/or Keycloak, including custom claim/protocol mappers and extensions or plugin development
• Work with OpenID Connect (OIDC) and OAuth 2.0 protocols (Authorization Code + PKCE, Client Credentials, token introspection)
• Integrate Verifiable Credentials into IAM and authentication/authorization flows
• Map VC attributes/claims to OIDC claims and existing identity models
• Perform JWT validation, manage JWKS/key management, token lifecycle, and revocation
• Integrate IAM components with backend applications/services using REST API

Please be informed that the data controller is Dev-Heroes Sp. z o.o. (hereinafter "controller"). You have the right to request access to your personal data, their rectification, erasure or restriction of processing, the right to object to processing, as well as the right to data portability and to lodge a complaint to the supervisory authority. Personal data will be processed for the purpose of the recruitment process. Provision of data to the extent resulting from the Act of 26 June 1974 Labour Code is mandatory. In the remaining scope, providing data is voluntary. Refusal to provide mandatory data may result in the impossibility to carry out the recruitment process. The Administrator processes mandatory data on the basis of a legal obligation incumbent upon him/her, while with regard to additional data, the basis for processing is consent. Personal data will be processed until the recruitment procedure is completed and for the period of the possibility of asserting potential claims, and in the case of consent to participate in future recruitment procedures - until the withdrawal of such consent. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data is the Just Join IT service and other entities to whom we have entrusted the processing of data in connection with recruitment.