Keycloak Experts in Berlin
for secure identity systems, matched in minutes from over 15,000 CVs with the power of AIHire experts who secure applications with OpenID Connect and OAuth 2.0, connect enterprise directories, and tailor realms, clients, roles and identity flows. FRATCH matches you quickly and precisely with vetted, available freelancers.
Meet FRATCH Experts in Berlin, who have recently used Keycloak
Julius H.
Last position:
Freelancer at Freelancer — Pharma Industry
- Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
- Implemented Datadog observability stack via Terraform and datadog-operator
- Established automated end-to-end tests and on-call processes, improving incident response and service reliability
- Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
- Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability
Jorge P.
Last position:
Software Engineer – AWS and Kubernetes Specialist at Citti
- Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
- Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator
Imran A.
Last position:
Software Engineer II at LivePerson Germany GmbH
- Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
- Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
- Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
- Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
- Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
- Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.
Abhiroop B.
Last position:
Software Engineer III at Foundry Digital
- Developed and deployed microservices in Kotlin and Spring Boot, integrated AWS Secrets Manager to secure credentials and decreased network calls using Spring cache.
- Refactored Kafka consumer using Spring Kafka with semaphore-based backpressure to cap records and keep heap memory stable under spikes; switched to batch upserts to cut down on database invocations; added Testcontainers integration tests for Kafka and database to pave the way for future changes.
- Automated the financial reconciliation workflow in Spring Boot (Kotlin) using Spring Scheduler, transactional boundaries, JPA/Hibernate on MySQL, and Flyway migrations, saving the accounts team 16+ hours per week.
- Designed and dockerized payments end-to-end test framework in Robot (Python) with reusable keyword libraries and profiles; integrated with GitLab CI (JaCoCo XML and HTML reports) to accelerate releases and lift code coverage to 80%.
- Implemented end-to-end observability on Datadog by instrumenting services with Datadog APM, correlating metrics and logs, provisioning dashboards, and creating monitors with burn-rate alerts and anomalies to harden reliability and give stakeholders clear visibility.
Ola V.
Last position:
IT Lecturer
- IT training in theory and practice for IT specialists in application development and system integration
Ibrahim H.
Last position:
Senior Full Stack / AI Engineer at Punktum Digital GmbH
- Context: Healthcare and laboratory teams required faster document analysis, treatment-planning support, and reliable AI workflows for MR/VR-assisted operations.
- Contribution: Built the AI healthcare platform, model/agent workflows, VR-glasses deployment platform, REST APIs, Next.js/React interfaces, and CI/CD pipelines.
- Impact: Delivered a production-ready AI product foundation that improved clinical document review, supported laboratory automation, and made VR fleet deployment manageable across environments.
Tech: TypeScript, Next.js, Node.js, React, Java, Spring Boot, Python, PyTorch, TensorFlow, Docker, PostgreSQL, OpenAPI, GitLab, GitHub Actions.
Can K.
Last position:
DevOps Specialist at Eviden Germany GmbH
Manage the development release and update process for a digitized nationwide trade register project "AuRegis".
Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.
Oversee system release of microservice architecture.
Build the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.
Automate deployment onto OpenShift using Kustomize.
Set up infrastructure components for development, code review, and code quality analysis including SonarQube.
Integrate GitOps tools such as Kustomize and ArgoCD, using both Azure and private cloud for sensitive data handling.
Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.
Automate delivery to customers and deployment on test systems.
Create Kustomize manifests for microservices and develop the related automation, treating documentation as code for clarity and reproducibility.
Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.
Oleg A.
Last position:
Staff Software Engineer at Kpler Germany GmbH
- Delivered a new notifications platform implementation built from scratch to replace existing and upcoming services
- Collaborating with other teams to integrate more domains
Tech stack:
- Data: Scala 3, Apache Kafka, Python, Airflow, Astronomer
- BE-FE: TypeScript, NestJS, Java, Spring Boot, Vue
- Dev-ops: AWS, PostgreSQL, Docker, GitHub Actions, Kubernetes, Helm, ArgoCD
Igor K.
Last position:
Freelance Software Developer
Karthikeyan R.
Last position:
Full-Stack Developer — Own Product at Self-employed
Java 21 · Spring Boot 3 · Keycloak · PostgreSQL · Docker · Nginx · GitHub Actions · DigitalOcean · React 18 · TypeScript · Plasmo
- Architected and shipped a production-ready Job Application Tracker end-to-end: REST API with 5-stage workflow, pagination, sorting, and dynamic filtering — full ownership from design to live cloud deployment on DigitalOcean.
- Implemented production-grade identity management: OAuth 2.0 / OpenID Connect / JWT / RBAC via Keycloak, applying Hexagonal Architecture and DDD principles.
- Built automated CI/CD pipeline (GitHub Actions); containerised with Docker; Nginx reverse proxy with path-based routing and SSL termination.
- Developed a Chrome Extension (Plasmo framework, Manifest V3) that auto-fills job applications directly from LinkedIn into the tracker — demonstrates full product thinking across backend API and browser client.
Bertrand R.
Last position:
Interim IAM Product Owner (Identity Management) at REWE digital GmbH
- Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
- Leading the “Identity & Directory Management” product (8 people) as Product Owner.
- Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
- Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
- Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.
Matthias Z.
Last position:
Senior Flutter Developer at Materna
- Developed a Flutter app for eID ID card logins
- Focus: Flutter, iOS, eID, AusweisAppSDK, Mason, Keycloak, Agentic Coding, Arc42, Jenkins
Tobias J.
Last position:
Design of an AI-Agent-Based ERP System
- Design of an LLM-based agent system to control the ERP software
- Development of agent workflows with LangGraph and PydanticAI
- Planning interfaces between business logic and language models
- Planning agent orchestration
- Prototype development and demonstration
Tools: Python, Pydantic, React, LangChain, LangGraph, Linux
Tino T.
Last position:
Director Technology at Forte Digital Germany
- Leading 20+ staff in development, site reliability engineering, and architecture.
- Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
- Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
- Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
- Developing prototypes for traditional, AI-based, and agentic AI workflows.
Alexander V.
Last position:
Product Owner at FI-TS
- Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
- Coordinating and managing external partners and service providers
- Ensuring service delivery on time and on budget with budget responsibility
- Integrating the cloud solution with external public clouds (AWS)
- Setting up and defining processes and workflows in Jira and Confluence
- Product management of software development for automation and self-service in CI/CD DevOps mode
- Agile software development with Kanban and Scrum in various development teams
- Single point of contact for key customers in respective projects
- Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
- Migrating existing customers to the AWS cloud as product owner
- Creating and aligning a product roadmap with internal and external stakeholders
Discover over 15,000 top freelancers
Statistics of experts using Keycloak
Aggregated from the professional profiles of matched freelancers.
Experience
18 years
Position duration
2 years (Germany: 1.7 years)
Positions per freelancer
13 (Germany: 14)
Top business areas
Information Technology, Product Development, Project Management
Top industries
Information Technology, Automotive, Banking and Finance
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
82% (Germany: 87%)
Master's degree or higher
24% (Germany: 54%)
Certifications per freelancer
2
Most common languages
German, English, French
Speak two or more languages
96% (Germany: 97%)
Based on our profile pool as of 19 Sep 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using Keycloak
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 19 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Keycloak experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Automotive (52%)
- Banking and Finance (52%)
- Retail (48%)
- Media and Entertainment (43%)
- Telecommunication (39%)
- Education (35%)
- Manufacturing (30%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Identity and access foundation
Keycloak is an open-source identity and access management system for applications, APIs and services. It centralizes login, single sign-on, user federation, roles, groups and consent. Teams can run it independently instead of building authentication into every product.
Core capabilities
Keycloak supports OpenID Connect, OAuth 2.0 and SAML for modern application and enterprise access. Experts configure realms, clients, scopes, claims, token policies and fine-grained permissions. They also shape branded login pages, account management and multi-factor authentication flows.
Ecosystem and tooling
A strong setup connects Keycloak with existing identity and delivery systems.
- Integrate LDAP or Active Directory user directories
- Connect Google, Microsoft and other identity providers
- Secure REST APIs, front ends, mobile apps and service accounts
- Automate configuration through the Admin REST API, Terraform or operators
Where companies use it
Companies use Keycloak for workforce single sign-on, customer identity, partner portals and internal platforms. It fits microservices, Kubernetes environments and hybrid estates where several applications need consistent access rules. Berlin teams may use it across software, public services, research and established enterprises, with remote or on-site collaboration depending on security needs.
When freelance expertise helps
Specialists are valuable during a migration from custom login code, a rollout across many applications or a redesign of authorization policies. They can assess realm structure, map directory attributes, plan high availability and establish safe promotion between environments. Berlin-based work may involve workshops on site, while implementation and documentation can often happen remotely in English or German.
What strong professionals deliver
Quality work goes beyond installing the server. Experienced Keycloak professionals make identity flows understandable, minimize privilege, protect secrets and test token claims across real applications. They document administration, recovery and upgrades, observe failed logins and plan changes around compatibility, security and operational ownership.
Frequently asked questions
Questions about Keycloak? Start with the answers below.
Keycloak provides centralized identity and access management for web applications, APIs, mobile products and internal services. It handles single sign-on, user federation, social login, multi-factor authentication, roles and token issuance through established protocols.
Keycloak gives companies more control over hosting, configuration and data than many managed identity services. Auth0, Okta and Microsoft Entra ID can reduce operational work, so the right choice depends on compliance needs, integration depth, team capacity and the preferred balance between control and service ownership.
A strong Keycloak specialist should understand OpenID Connect, OAuth 2.0, SAML, JWT claims and browser security. Useful adjacent skills include LDAP or Active Directory integration, Kubernetes, Terraform, API gateways, Java-based extensions and secure release practices.
A Keycloak freelancer should have hands-on depth that matches the project’s risk and scope. Simple client integration needs differ from multi-realm federation, custom extensions, migration work or highly available production operations, so ask for evidence from comparable identity flows rather than relying on certification alone.
Keycloak work is often suitable for remote collaboration because configuration, testing and documentation can be shared securely. Berlin projects may still need on-site workshops for architecture, access reviews or stakeholder alignment, with English or German agreed according to the client team.
Review how a Keycloak specialist models realms, clients, roles, claims and trust boundaries. Good work includes least-privilege authorization, tested login and logout flows, secure secret handling, clear runbooks, useful monitoring and a practical upgrade plan.
Keycloak can replace or reduce custom login code when the product can adopt standard protocols and token patterns. A careful specialist first maps existing users, sessions, permissions and recovery paths, then plans migration so access is preserved and authorization does not change unexpectedly.
A Keycloak freelancer may work with custom authenticators, identity providers, protocol mappers, themes or event listeners. Extensions should be small, documented and tested against the chosen release because internal behavior and deployment practices can affect long-term maintenance.
The average hourly rate of freelancers in Berlin, Germany who have used Keycloak in their recent projects is 91 €, which corresponds to a daily rate of about 731 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used Keycloak in their recent projects, 82% hold at least a Bachelor's degree and 24% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used Keycloak in their recent projects have 18 years of professional experience, with a single engagement typically lasting around 2 years.
The most common languages among freelancers in Berlin, Germany who have used Keycloak in their recent projects are German (100%), English (96%), and French (35%).
The most common industries among freelancers in Berlin, Germany who have used Keycloak in their recent projects are Information Technology (100%), Automotive (52%), and Banking and Finance (52%).
The most common business areas among freelancers in Berlin, Germany who have used Keycloak in their recent projects are Information Technology (100%), Product Development (83%), and Project Management (61%).
Main locations of FRATCH Experts, who have recently used Keycloak
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
