Senior IAM/SSI Integration Engineer

<p dir="ltr">Our client is an EU-based organization currently navigating the shift toward eIDAS 2.0 and EUDI Wallet compliance — early-mover territory, not a settled playbook.</p>

<p dir="ltr">An extension of an ongoing IAM modernization effort. The scope is still taking shape as EU standards mature, so expect to help define the approach as much as execute it. Remote delivery, direct line to the client's internal team.</p>

<div style="display: flow-root; position: relative;"><div role="article" tabindex="0" aria-setsize="12" aria-posinset="10" aria-label="Message 10 of 12"><div><div><div><div><div><div style="--_prose-font-body: var(--font-claude-response, var(--cds-font-voice));"><div><p dir="ltr">Small and senior, you'll work closely with the client's own architects and stakeholders rather than through layers. Flexibility on how the work splits (one generalist or two specialists) suggests a client that's still calibrating scope, not locked into a fixed structure.&nbsp;</p></div></div></div></div></div></div></div></div></div><div style="display: flow-root; position: relative;"><div role="article" tabindex="-1" aria-setsize="12" aria-posinset="11" aria-label="Message 11 of 12"><div><div><div><div><div><div><div><div><div><p dir="ltr">&nbsp;</p></div></div></div></div></div></div></div></div></div></div></div>

<ul><li>Interview process that respects people and their time</li><li>Professional and open IT community</li><li>Internal meet-ups and resources for knowledge sharing</li><li>Time for recovery and relaxation</li><li>Bright online and offline events</li><li>Opportunity to become part of our internal volunteer community</li></ul>

Integrate SSI / Verifiable Credential solutions into existing IAM and authentication infrastructure; Configure and extend Keycloak and/or Zitadel — realms/tenants, custom claim and protocol mappers, plugin development; Map VC attributes/claims to OIDC claims and existing identity models; Handle JWT validation, JWKS, key management, and token lifecycle/revocation; Support identity federation and auth/authz architecture, integrating IAM components with backend services.

<p dir="ltr"><strong>Must have:</strong></p><ul dir="ltr"><li>Strong hands-on experience with Keycloak and/or Zitadel</li><li>Strong OIDC / OAuth 2.0 knowledge (Authorization Code + PKCE, Client Credentials, token introspection)</li><li>Experience integrating VCs into IAM/auth flows</li><li>JWT validation, JWKS, key management, token lifecycle experience</li><li>REST API integration experience</li></ul><p dir="ltr"><strong>Nice to have:</strong></p><ul dir="ltr"><li>EUDI ARF or comparable SSI framework familiarity</li><li>OpenID4VCI / OpenID4VP knowledge</li><li>Hydra/Dex or comparable identity components</li><li>German</li></ul>