Staff Software Engineer - Keycloak

About the role

The transportation industry has no shortage of complex problems requiring creative solutions to scale efficiently. In this specialized Staff-level role, you will lead the Master Identity and Security Orchestration efforts for our TMS platform. You will balance high-level architectural design with hands-on execution, ensuring that our identity access management (IAM) and security policies are seamlessly orchestrated across our cloud-native, microservices-driven environment.

Responsibilities

• Identity Orchestration: Lead the design and implementation of our IAM strategy, primarily utilizing Keycloak to manage authentication and authorization across the platform
• Security Automation: Automate security policies and "orchestrate" identity flows to ensure a zero-trust environment within our Azure and Kubernetes infrastructure
• Full-Stack Collaboration: Work closely with stakeholders and engineers to navigate business objectives, specifically ensuring that security does not become a bottleneck for development velocity
• Architectural Leadership: Engage in the full development life cycle, applying a "security-first" mindset to our React/Node.js stack environment
• Event-Driven Security: Implement secure patterns for real-time data streaming via Kafka, ensuring proper ACLs and encryption for data in motion
• Be a Force Multiplier: Act as a mentor and teacher, leveling up other engineers in the art of secure coding, token management, and identity protocols
• Client Engagement: Serve as a primary technical point of contact for client-facing security discussions, helping partners integrate with our identity brokering services
• Quality & Performance: Maintain a high bar for clean, maintainable, and well-tested code with vigorous attention to detail and automated testing

Qualifications

• 5+ years of experience in software development, with a proven track record of designing and maintaining distributed, web-based systems
• Strong proficiency with object-oriented software development to work in a Node.js/JavaScript/TypeScript and React environment
• Expert-level experience with Keycloak is ideal, though Okta expertise is acceptable
• Understanding of Java is desirable for writing extensions in Keycloak
• Deep knowledge of IAM protocols including OIDC, OAuth2, and SAML
• Strong understanding of Kubernetes and containerization in an enterprise software environment
• Expertise with Infrastructure as Code (IaC), ideally using Terraform within a cloud environment
• Experience with SQL/RDBMS and a strong understanding of event-driven architecture
• Demonstrated ability to mentor junior engineers and lead through influence rather than just authority
• Experience in the logistics or TMS industry is a strong plus
• Compassion, empathy, adaptability and a detective mindset are ideal qualities to be successful

Benefits

Innovative & Impactful Work – Be part of a company that is transforming the logistics industry with cutting-edge technology.
Growth & Career Development – Join a fast-growing company with opportunities for professional advancement.
Competitive Compensation – Base salary plus bonus potential.
Strong Company Culture – Work with a collaborative, driven, and passionate team that values innovation and excellence.

Engineering

Minneapolis, MN