iO Associates

3 days ago


tampa, United States iO Associates - US Full time

Position Overview: Our client is seeking a highly skilled and experienced IAM Consultant to lead the setup and configuration of Keycloak for their growing platform. The ideal candidate will have deep knowledge of identity and access management, hands-on experience with Keycloak, and proven expertise in integrating Keycloak with FastAPI to secure APIs and user data.

As part of the role, you will work closely with their development team to implement security best practices, manage user roles and permissions, and enforce robust security policies across the healthcare application.

Key Responsibilities:

  • Keycloak Setup and Configuration:

    • Deploy and configure Keycloak as the central Identity and Access Management (IAM) solution.
    • Define and manage Keycloak realms, clients, and roles to meet the application security needs.
    • Configure Keycloak for authentication via username and password (instead of email).
  • FastAPI Integration:

    • Integrate FastAPI with Keycloak for authentication and authorization processes.
    • Implement OAuth2/OpenID Connect flows to secure API endpoints with Keycloak security tokens.
    • Set up user session management and token validation within the FastAPI framework.
  • User Management:

    • Enable user management features, including creating, blocking, and deleting users from within the FastAPI application, syncing with Keycloak.
    • Implement role-based access control (RBAC) APIs for managing user roles and permissions.
  • Route Access Control:

    • Use Keycloak tokens to enforce access control at the route level based on user roles and permissions.
    • Develop decorators or middleware to ensure security policies are upheld for protected routes.
  • Multi-Factor Authentication (MFA):

    • Configure and implement MFA within Keycloak (OTP/TOTP) to secure user login.
    • Ensure that MFA is correctly integrated with the authentication flows in FastAPI.
  • Security Policies:

    • Ensure that sensitive operations (e.g., user management, role updates) are secured with appropriate permissions and roles.
    • Regularly refresh and validate tokens to maintain the security of user sessions.

Required Skills and Experience:

  • Keycloak Expertise: 4+ years of hands-on experience setting up and configuring Keycloak for IAM.
  • Python & FastAPI: 2+ years of experience coding in Python (v3.10+) and working with FastAPI and SQLAlchemy (Postgres).
  • Authentication & Authorization: Deep understanding of OAuth2/OpenID Connect flows, session management, and RBAC.
  • Security Knowledge: Familiarity with security best practices, including multi-factor authentication (MFA), token validation, and securing sensitive operations.
  • Problem-Solving: Strong troubleshooting and problem-solving skills in IAM-related issues.
  • Team Collaboration: Ability to collaborate effectively with cross-functional teams to implement security solutions.

Preferred Skills:

  • Experience with healthcare platforms or knowledge of healthcare data security standards (e.g., HIPAA).
  • Familiarity with DevOps tools and deployment pipelines.

Why Join Our Client:

  • Impact: Play a key role in enhancing healthcare access and security for users.
  • Growth Opportunity: Work in a fast-paced startup environment with the opportunity to shape the future of healthcare tech.
  • Collaborative Culture: Be part of a passionate and talented team committed to innovation.
Desired Skills and Experience
Position Overview: Our client is seeking a highly skilled and experienced IAM Consultant to lead the setup and configuration of Keycloak for their growing platform. The ideal candidate will have deep knowledge of identity and access management, hands-on experience with Keycloak, and proven expertise in integrating Keycloak with FastAPI to secure APIs and user data.
As part of the role, you will work closely with their development team to implement security best practices, manage user roles and permissions, and enforce robust security policies across the healthcare application.
Key Responsibilities:
Keycloak Setup and Configuration:
Deploy and configure Keycloak as the central Identity and Access Management (IAM) solution.
Define and manage Keycloak realms, clients, and roles to meet the application security needs.
Configure Keycloak for authentication via username and password (instead of email).
FastAPI Integration:
Integrate FastAPI with Keycloak for authentication and authorization processes.
Implement OAuth2/OpenID Connect flows to secure API endpoints with Keycloak security tokens.
Set up user session management and token validation within the FastAPI framework.
User Management:
Enable user management features, including creating, blocking, and deleting users from within the FastAPI application, syncing with Keycloak.
Implement role-based access control (RBAC) APIs for managing user roles and permissions.
Route Access Control:
Use Keycloak tokens to enforce access control at the route level based on user roles and permissions.
Develop decorators or middleware to ensure security policies are upheld for protected routes.
Multi-Factor Authentication (MFA):
Configure and implement MFA within Keycloak (OTP/TOTP) to secure user login.
Ensure that MFA is correctly integrated with the authentication flows in FastAPI.
Security Policies:
Ensure that sensitive operations (e.g., user management, role updates) are secured with appropriate permissions and roles.
Regularly refresh and validate tokens to maintain the security of user sessions.
Required Skills and Experience:
Keycloak Expertise: 4+ years of hands-on experience setting up and configuring Keycloak for IAM.
Python & FastAPI: 2+ years of experience coding in Python (v3.10+) and working with FastAPI and SQLAlchemy (Postgres).
Authentication & Authorization: Deep understanding of OAuth2/OpenID Connect flows, session management, and RBAC.
Security Knowledge: Familiarity with security best practices, including multi-factor authentication (MFA), token validation, and securing sensitive operations.
Problem-Solving: Strong troubleshooting and problem-solving skills in IAM-related issues.
Team Collaboration: Ability to collaborate effectively with cross-functional teams to implement security solutions.
Preferred Skills:
Experience with healthcare platforms or knowledge of healthcare data security standards (e.g., HIPAA).
Familiarity with DevOps tools and deployment pipelines.
Why Join Our Client:
Impact: Play a key role in enhancing healthcare access and security for users.
Growth Opportunity: Work in a fast-paced startup environment with the opportunity to shape the future of healthcare tech.
Collaborative Culture: Be part of a passionate and talented team committed to innovation.

  • iO Associates

    7 days ago


    tampa, United States iO Associates - US Full time

    iO Associates is currently partnered with one of the top Cyber-Security and Tech Companies in the U.S. to help them find a Senior Front End Engineer skilled in ReactJS.In this role, you will write code and manipulate data in ways that have never been done before, driving automation of threat detection and response for one of the world's fastest growing...

  • Front-End Developer

    1 week ago


    tampa, United States iO Associates - US Full time

    iO Associates is currently partnered with one of the top Cyber-Security and Tech Companies in the U.S. to help them find a Senior Front End Engineer skilled in ReactJS.In this role, you will write code and manipulate data in ways that have never been done before, driving automation of threat detection and response for one of the world's fastest growing...

  • Front-End Developer

    1 week ago


    Tampa, United States iO Associates - US Full time

    iO Associates is currently partnered with one of the top Cyber-Security and Tech Companies in the U.S. to help them find a Senior Front End Engineer skilled in ReactJS.In this role, you will write code and manipulate data in ways that have never been done before, driving automation of threat detection and response for one of the world's fastest growing...

  • iO Associates

    3 days ago


    tampa, United States iO Associates - US Full time

    A career built on building zero defect homes, cost management, and adherence to schedules.Your Responsibilities on the Team Develop and implement IAM strategies and policies to secure sensitive information and systems.Manage the lifecycle of digital identities, including creation, maintenance, and deletion of user accounts and access rights.Ensure compliance...


  • tampa, United States iO Associates - US Full time

    Okta Enterprise Architect This is a remote position where the candidate can work from any location within the United States provided, they are able to work on an eastern time zone schedule. Minimum Qualifications: Minimum of 5 -7 years in Okta of enterprise IT Architecture experience and hands-on enterprise IT engineering experience. Must be Okta...

  • Sr Okta Consultant

    3 weeks ago


    tampa, United States iO Associates - US Full time

    Currently, we are seeking a motivated, career and team-oriented Okta Consultant, Solution Engineer This is a remote position where the candidate can work from any location within the United States provided, they are able to work on an eastern time zone schedule. Responsibilities include but are not limited to: Collaborate with technical teams and clients...

  • MSP Partner Manager

    2 weeks ago


    Tampa, United States iO Associates - US Full time

    Job Title: MSP Partner Manager - IAM Solutions Consulting Firm Location: Remote Employment Type: Full-Time About the Client: Our client, a leader in Identity and Access Management (IAM) solutions, is focused on delivering secure, streamlined access solutions for a diverse client base. They specialize in implementing, configuring, and optimizing IAM...


  • tampa, United States iO Associates - US Full time

    Okta Enterprise Architect This is a remote position where the candidate can work from any location within the United States provided, they are able to work on an eastern time zone schedule. Minimum Qualifications: Minimum of 5 -7 years in Okta of enterprise IT Architecture experience and hands-on enterprise IT engineering experience. Must be Okta...

  • MSP Partner Manager

    2 weeks ago


    tampa, United States iO Associates - US Full time

    Job Title: MSP Partner Manager - IAM Solutions Consulting Firm Location: Remote Employment Type: Full-TimeAbout the Client: Our client, a leader in Identity and Access Management (IAM) solutions, is focused on delivering secure, streamlined access solutions for a diverse client base. They specialize in implementing, configuring, and optimizing IAM...

  • Okta OIG Consultant

    4 weeks ago


    Tampa, United States iO Associates - US Full time

    Job Description:We are seeking an experienced Okta Workforce Identity Consultant to work with us on a part-time, project-based basis. The ideal candidate will have deep expertise in Okta Workforce Identity with experience as a solutions architect in Okta Identity Governance, including Access Requests, Access certifications, role governance, and other key...


  • Tampa, United States iO Associates - US Full time

    Job Title: Microsoft Security Project ManagerLocation: 100% RemoteAbout the Role: Our client, a gold Microsoft partner, is seeking a skilled Microsoft Security Project Manager to join their team. This role will focus on managing projects related to Microsoft Sentinel, Purview, and Defender, helping clients strengthen their security posture and ensure...


  • Tampa, United States iO Associates - US Full time

    A career built on building zero defect homes, cost management, and adherence to schedules.Your Responsibilities on the Team Develop and implement IAM strategies and policies to secure sensitive information and systems.Manage the lifecycle of digital identities, including creation, maintenance, and deletion of user accounts and access rights.Ensure compliance...

  • Senior Consultant

    2 days ago


    Tampa, United States iO Associates - US Full time

    Position Overview: Our client is seeking a highly skilled and experienced IAM Consultant to lead the setup and configuration of Keycloak for their growing platform. The ideal candidate will have deep knowledge of identity and access management, hands-on experience with Keycloak, and proven expertise in integrating Keycloak with FastAPI to secure APIs and...


  • Tampa, United States Creative Financial Staffing Full time

    Position Title: React Native DeveloperCheck you match the skill requirements for this role, as well as associated experience, then apply with your CV below.Location: REMOTE(Est hours)Position Overview:We are seeking a talented React Native Developer to join our dynamic team. The ideal candidate will have a passion for mobile app development, a strong...


  • tampa, United States Coca-Cola Beverages Florida Full time

    Coke Florida is searching for a Service Delivery Manager to work out of our Tampa HQ area office, working Mon-Fri from 8AM-5PM.The Technology Service Delivery Manager oversees a number of key teams and functions that ensure technology applications and services are properly supported, technology systems and hardware is maintained across facilities, and high...


  • tampa, United States Coca-Cola Beverages Florida Full time

    Coke Florida is searching for a Service Delivery Manager to work out of our Tampa HQ area office, working Mon-Fri from 8AM-5PM.The Technology Service Delivery Manager oversees a number of key teams and functions that ensure technology applications and services are properly supported, technology systems and hardware is maintained across facilities, and high...


  • Tampa, United States Coca-Cola Beverages Florida Full time

    Coke Florida is searching for a Service Delivery Manager to work out of our Tampa HQ area office, working Mon-Fri from 8AM-5PM.The Technology Service Delivery Manager oversees a number of key teams and functions that ensure technology applications and services are properly supported, technology systems and hardware is maintained across facilities, and high...


  • Tampa, United States RIT Solutions, Inc. Full time

    Position: Endpoint Security Desktop Engineer Duration: 6-month contract to cover a LOA of a team member due to a serious illness. Potential to convert to perm/FTE after the initial contract term. Location: Hybrid 3X per week - Houston, TX (near the Galleria) Interview Process: 2 rounds (1st round virtual, 2nd round onsite) Job Overview: We are seeking an IT...