IAM Engineer (Keycloak)

Join the Team Modernizing Medicine

At ModMed , we’re not just building software—we’re reimagining the healthcare experience. Founded in 2010 by a practicing physician and a successful tech entrepreneur, we took a radically different approach: we hired doctors and taught them how to code. This "for doctors, by doctors" philosophy has allowed us to create an AI-enabled, specialty-specific cloud platform that places patients at the center of care.

A Culture of Excellence

When you join ModMed, you’re joining an award-winning team recognized for innovation and employee satisfaction. From our global headquarters in Boca Raton Florida, and extensive employee base in Hyderabad India, we are a team of 4,500+ passionate problem-solvers on a mission to increase medical practice success and improve patient outcomes:

Consistently ranked as a Top Place to Work

2025 Globee Business Awards: Gold Globee for “Technology Team of the Year”

2025 Black Book Awards: Ranked #1 EHR in 11 Specialties

Florida Venture Forum: Venture-Backed Company of the Year

We are growing fast, thinking big, and we are just getting started.

Ready to modernize medicine with us?

Job Description Summary:

We are looking for an experienced Identity and Access Management (IAM) Engineer with strong expertise in Red Hat SSO / Keycloak to design, implement, and support secure authentication and authorization solutions in enterprise environments.The ideal candidate will have hands-on experience implementing Keycloak in production environments, integrating with enterprise identity providers, and deploying IAM solutions within containerized platforms such as OpenShift/Kubernetes.This role involves building secure authentication architecture aligned with modern OAuth2 / OpenID Connect standards, supporting single sign-on (SSO) across applications, and ensuring compliance with enterprise security standards in banking-grade environments.

Job Responsibilities

AM Architecture & Implementation

Design and implement IAM solutions using Red Hat SSO / Keycloak in enterprise environments.

Build secure authentication architectures supporting enterprise applications.

Implement Single Sign-On (SSO) across multiple internal and external applications.

Configure realms, clients, roles, policies, and identity providers in Keycloak.

Identity Federation & Integrations

Implement Identity Federation with enterprise identity providers such as:

Microsoft Azure Active Directory

LDAP / Active Directory

SAML-based identity providers

Integrate Keycloak with enterprise systems including:

API Gateways

Microservices platforms

External SaaS applications

Authentication Protocols

Implement authentication and authorization using:

OAuth2

OpenID Connect (OIDC)

SAML 2.0

Develop secure token-based authentication flows for microservices and APIs.

Container & Platform Integration

Deploy and manage Keycloak/Red Hat SSO in containerized environments such as:

Red Hat OpenShift

Kubernetes

Manage high availability, scaling, and performance tuning of IAM components.

Security & Compliance

Ensure IAM solutions meet enterprise security standards , especially within banking or regulated environments .

Implement secure authentication flows including:

MFA

Conditional access

Role-based access control (RBAC)

Support security audits and compliance initiatives.

Development & Automation

Develop custom Keycloak extensions, providers, and themes when required.

Automate IAM deployments using CI/CD pipelines.

Support infrastructure-as-code and DevOps practices.

Job Qualifications

Core IAM Skills

6-12 years of relevant experience

Strong hands-on experience with Keycloak or Red Hat Single Sign-On

Experience implementing IAM solutions in production environments

Deep understanding of:

OAuth2

OpenID Connect (OIDC)

SAML 2.0

Integration Experience

Identity Federation with:

Azure Active Directory

LDAP / Active Directory

Experience integrating IAM with API gateways and microservices platforms

Container & Cloud Platforms

Hands-on experience with:

Red Hat OpenShift

Docker

Kubernetes

Development Skills

Java or Spring Boot development (for Keycloak extensions)

REST API integration

Experience with CI/CD pipelines

Preferred Qualifications

Knowledge of Zero Trust architecture

Experience implementing Multi-Factor Authentication (MFA)

Familiarity with API security frameworks

Experience with monitoring tools (Prometheus, Grafana)

Red Hat certification related to OpenShift or security

Certified IAM / security certifications (CISSP, CISM, etc.)

Kubernetes certifications

ModMed Benefits Highlight: At ModMed, we believe it’s important to offer a competitive benefits package designed to meet the diverse needs of our growing workforce. Eligible Modernizers can enroll in a wide range of benefits:

Meals & Snacks: Enjoy complimentary office lunches & dinners on select days and healthy snacks delivered to your desk,

Insurance Coverage: Comprehensive health, accidental, and life insurance plans, including coverage for family members, all at no cost to employees,

Allowances: Annual wellness allowance to support your well-being and productivity,

Earned, casual, and sick leaves to maintain a healthy work-life balance,

Bereavement leave for difficult times and extended medical leave options,

Paid parental leaves, including maternity, paternity, adoption, surrogacy, and abortion leave,

Celebration leave to make your special day even more memorable, and company-paid holidays to recharge and unwind.

PHISHING SCAM WARNING: ModMed is among several companies recently made aware of a phishing scam involving imposters posing as hiring managers recruiting via email, text and social media. The imposters are creating misleading email accounts, conducting remote "interviews," and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from ModMed without a formal interview process, and valid communications from our hiring team will come from our employees with a ModMed email address (first.lastname@modmed.com). Please check senders’ email addresses carefully. Additionally, ModMed will not ask you to purchase equipment or supplies as part of your onboarding process. If you are receiving communications as described above, please report them to the FTC website .

ModMed Technologies India Private Limited follows a strict, merit-based and transparent recruitment process conducted only through official and authorized channels.

We do not:

Charge any fees, processing charges, or amount by any nomenclature, whether as a fee or deposit at any stage of the recruitment process;

Authorise any individual, employee, or third party to collect any such payments (regardless of nomenclature) to offer or facilitate or recruitment opportunities; or

Conduct hiring via informal messaging apps or personal email IDs.

All official communication is made only through verified channels, our website, and recognised recruitment platforms.

We strongly advise candidates not to share personal/financial information or make any payments in response to suspicious communications. Any such instances may be reported to us at hrcompliance@modmed.com .

ModMed Technologies India Private Limited will not be responsible for any loss arising from fraudulent or unauthorised communications.