Staff Software Engineer

Architus

. Drive technical ownership of migrating an authentication ecosystem from a third-party hosted IdP to a self-hosted Keycloak platform .

Posted 9/29/2026full-timeVilnius • LithuaniaLead💰 €9,000 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in migrating authentication ecosystems to self-hosted platforms, particularly Keycloak, while leveraging cloud-native solutions on GCP. Proficient in leading technical initiatives, implementing user migration strategies, and collaborating across teams to enhance engineering standards.

Highest-signal resume keywords

Keycloak MigrationGCP/KubernetesAuthentication ConceptsCI/CD and GitOpsInfrastructure as Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Authentication & IdentityBackend Software EngineeringPlatform / Cloud EngineeringTypeScriptKubernetesHelmTerraformOIDCOAuth2SAML

Soft Skills

Excellent English CommunicationCollaborationMentoring

Tools & Technologies

GCP Secret ManagerArgo CDDatabase ExtractionsAPI Exports

Industry Keywords

Cloud-Native SolutionsIdentity Platform MigrationsFinancial Services

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformJavaKubernetesRealmScalaTerraformTypeScript

About the role

Key responsibilities & impact

Drive technical ownership of migrating an authentication ecosystem from a third-party hosted IdP to a self-hosted Keycloak platform
Design and deliver the Keycloak migration on GCP/Kubernetes, contributing to architecture, implementation, and rollout planning
Lead the major-version upgrade of Keycloak
Design realm, client, and role export-import tooling
Implement user migration strategies, including password-hash preservation or lazy-migration/credential-reset flows
Negotiate and validate third-party data extractions, including database dumps or API exports
Build and manage stateful Kubernetes workloads using Helm
Set up Argo CD/GitOps workflows, TLS/certificate handling, and GCP Secret Manager integration
Collaborate with software, platform, and security engineers on technical direction and implementation
Improve engineering standards, documentation, and operational practices
Share knowledge and mentor team members
Lead a mission-critical technical initiative as an individual contributor without formal people-management responsibilities

Requirements

What you’ll need

Strong software engineering fundamentals and experience in at least two of: Authentication & Identity; Backend Software Engineering; Platform / Cloud Engineering
Experience with TypeScript is an advantage; Scala or Java experience is valuable but not required
Understanding of authentication concepts, protocols, and identity systems such as OIDC, OAuth2, or SAML
Hands-on experience designing and operating scalable, reliable cloud-native solutions, ideally on GCP or alternatively AWS or Azure
Experience with Kubernetes, Helm, GitOps (Argo CD), CI/CD, and modern software delivery practices
Experience planning and delivering complex platform or system migrations with minimal downtime
Experience with Infrastructure as Code tools such as Terraform is beneficial
Experience integrating with third-party platforms and relational databases
Understanding of software engineering best practices, automation, and observability
Comfortable working in an agile, collaborative environment and communicating with technical and non-technical stakeholders
Experience leading technical initiatives, influencing architectural decisions, or providing technical leadership across teams
Experience with identity platform migrations, custom Keycloak extensions (SPIs), observability, or financial services is a plus
Excellent English communication skills, written and verbal

Benefits

Comp & perks

Career growth through work with cutting-edge technologies in a global environment
Extra vacation days
Hybrid working options
Modern, pet-friendly office with parking and snacks
Ability to work remotely from another EU country for up to 30 days per year
Brand-new, high-performance equipment
Dynamic, collaborative, and friendly working atmosphere
Additional health insurance
3rd-pillar pension benefits