Staff Software Engineer - IAM Migration

About the role

Architus partners with a leading UK energy company to build a significant presence in Lithuania. As a Staff Software Engineer, you will drive a major Identity and Access Management (IAM) transformation, taking full technical ownership of migrating the authentication ecosystem from a third-party hosted IdP to a self-hosted Keycloak platform. This is an individual contributor role with no formal people management responsibilities, within a small, senior engineering team.

Key responsibilities

• Design and deliver the migration to a self-hosted Keycloak platform on GCP/Kubernetes, including architecture, implementation and rollout planning.
• Lead the major-version upgrade of Keycloak, design realm/client/role export-import tooling and implement user migration strategies.
• Negotiate and validate third-party data extractions (DB dumps vs. API exports).
• Build and manage stateful workloads on Kubernetes with Helm, set up Argo CD / GitOps workflows, handle TLS and integrate GCP Secret Manager.
• Work with software, platform and security engineers and share knowledge to improve engineering standards and documentation.

Required profile

• Experience in at least two of: authentication and identity, backend software engineering, platform/cloud engineering.
• Hands-on experience with scalable cloud-native solutions, ideally on GCP, or AWS or Azure.
• Solid experience with Kubernetes, Helm, GitOps (Argo CD), CI/CD and complex platform migrations with minimal downtime.
• Experience with IaC tools such as Terraform and with third-party integrations and relational databases is beneficial.
• Experience leading technical initiatives or influencing architecture is valued; people management is not required.
• Excellent written and spoken English.

Required skills

• TypeScript is an advantage; Scala or Java is also valuable but not required.
• Strong understanding of OIDC, OAuth2, SAML or similar; direct Keycloak experience is beneficial but not required.
• Knowledge of authentication protocols, identity systems, observability and automation.

What we offer

• Salary starting from EUR 9,000 gross per month, depending on experience (full-time only).
• Hybrid working, extra vacation days, and the option to work remotely from another EU country up to 30 days per year.
• Modern, pet-friendly office with parking and snacks, plus brand-new high-spec equipment.
• Additional health insurance and 3rd-pillar pension benefits.