Keycloak Experts in Berlin
in minutes from over 15,000 CVs with the power of AI.Hire experts who design single sign-on, realm and client setup, identity brokering, and secure role models with Keycloak. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Berlin, who have recently used Keycloak
Julius Herrera Glomm
Last position:
Freelancer at Freelancer — Pharma Industry
- Led migration to GCP using Terraform, GKE, and GitOps, improving deployment consistency and scalability
- Implemented Datadog observability stack via Terraform and datadog-operator
- Established automated end-to-end tests and on-call processes, improving incident response and service reliability
- Migrated from NGINX Ingress Controller to Kubernetes Gateway API (NGINX Gateway Fabric)
- Migrated stateful services (PostgreSQL and Redis) to GCP, improving scalability and operational reliability
Oleg Abrazhaev
Last position:
Staff Software Engineer at Kpler Germany GmbH
- Delivered a new notifications platform implementation built from scratch to replace existing and upcoming services
- Collaborating with other teams to integrate more domains
Tech stack:
- Data: Scala 3, Apache Kafka, Python, Airflow, Astronomer
- BE-FE: TypeScript, NestJS, Java, Spring Boot, Vue
- Dev-ops: AWS, PostgreSQL, Docker, GitHub Actions, Kubernetes, Helm, ArgoCD
Imran Ali
Last position:
Software Engineer II at LivePerson Germany GmbH
- Led development of 15+ microservices (Java 17, Spring Boot) driving customer interactions; migrated from on-prem to GCP Kubernetes, improving scalability and reducing infra cost by 20%.
- Optimized user services with CouchDB caching and API refactoring, cutting response times by 35% and enhancing customer experience.
- Implemented canary deployments, FluxCD GitOps, and CI/CD optimizations in GitLab, reducing release lead time by 25% and enabling zero-downtime rollouts.
- Set up Grafana health checks and Anodot alerts for latency, error, and throughput monitoring, reducing MTTR by 40%.
- Built secure APIs using OAuth2, DPoP, and Gatekeeper, integrated REST and GraphQL, and achieved 90%+ test coverage with unit and E2E tests.
- Mentored junior developers, promoted Agile best practices, and collaborated cross-functionally to deliver high-impact, reliable customer-facing features.
Abhiroop Basu
Last position:
Software Engineer III at Foundry Digital
- Developed and deployed microservices in Kotlin and Spring Boot, integrated AWS Secrets Manager to secure credentials and decreased network calls using Spring cache.
- Refactored Kafka consumer using Spring Kafka with semaphore-based backpressure to cap records and keep heap memory stable under spikes; switched to batch upserts to cut down on database invocations; added Testcontainers integration tests for Kafka and database to pave the way for future changes.
- Automated the financial reconciliation workflow in Spring Boot (Kotlin) using Spring Scheduler, transactional boundaries, JPA/Hibernate on MySQL, and Flyway migrations, saving the accounts team 16+ hours per week.
- Designed and dockerized payments end-to-end test framework in Robot (Python) with reusable keyword libraries and profiles; integrated with GitLab CI (JaCoCo XML and HTML reports) to accelerate releases and lift code coverage to 80%.
- Implemented end-to-end observability on Datadog by instrumenting services with Datadog APM, correlating metrics and logs, provisioning dashboards, and creating monitors with burn-rate alerts and anomalies to harden reliability and give stakeholders clear visibility.
Ola Van Dunen
Last position:
IT Lecturer
- IT training in theory and practice for IT specialists in application development and system integration
Ibrahim Hilali
Last position:
Senior Full Stack / AI Engineer at Punktum Digital GmbH
- Context: Healthcare and laboratory teams required faster document analysis, treatment-planning support, and reliable AI workflows for MR/VR-assisted operations.
- Contribution: Built the AI healthcare platform, model/agent workflows, VR-glasses deployment platform, REST APIs, Next.js/React interfaces, and CI/CD pipelines.
- Impact: Delivered a production-ready AI product foundation that improved clinical document review, supported laboratory automation, and made VR fleet deployment manageable across environments.
Tech: TypeScript, Next.js, Node.js, React, Java, Spring Boot, Python, PyTorch, TensorFlow, Docker, PostgreSQL, OpenAPI, GitLab, GitHub Actions.
Can Kocyigit
Last position:
DevOps Specialist at Eviden Germany GmbH
Manage the development release and update process for a digitized nationwide trade register project "AuRegis".
Support software in Kubernetes/OpenShift environments, configure management with Kustomize, and implement CI/CD pipelines using Jenkins/GitLab, SonarQube, ArgoCD, and Azure.
Oversee system release of microservice architecture.
Craft the CI/CD stack from scratch with GitLab CI, integrating integration tests, dependency checks, and security measures.
Automate deployment onto OpenShift using Kustomize.
Establish infrastructure components for development, code review, and code quality analysis including SonarQube.
Integrate GitOps tools such as Kustomize and ArgoCD, leveraging both Azure and private cloud for sensitive data handling.
Develop Python scripts in Jenkins for cryptostore configuration and system packaging of products and microservices into deployable units.
Automate delivery to customers and deployment on test systems.
Craft Kustomize manifests for microservices and develop accompanying automation, treating documentation as code for clarity and reproducibility.
Serve as technical advisor for the project's first go-live and oversee further deployments as technical rollout manager.
Igor Kazarnovskiy
Last position:
Freelance Software Developer
Bertrand Rothen
Last position:
Interim IAM Product Owner (Identity Management) at REWE digital GmbH
- Establishing Identity & Directory Management as a new (split-off) team & product within the IAM cluster.
- Leading the “Identity & Directory Management” product (8 people) as Product Owner.
- Concept for ‘Digital Identities’, i.e. IDs with n users/accounts and strategy for a modernized product offering.
- Upgrading APIs, migrating to a containerized infrastructure, rolling out international markets & standardized solutions across the REWE enterprise group.
- Tech: OpenText™ (NetIQ) eDirectory & Identity Manager, LDAP, SAP HR/HCM, Docker/Kubernetes/Podman, REST APIs, Microsoft Active Directory & Entra ID, postgresDB, Keycloak, Ansible, Cyberark (PAM), Apache Kafka, Jira, Confluence, Miro.
Matthias Zarzecki
Last position:
Senior Flutter Developer at Materna
- Developed a Flutter app for eID ID card logins
- Focus: Flutter, iOS, eID, AusweisAppSDK, Mason, Keycloak, Agentic Coding, Arc42, Jenkins
Tobias Jaeuthe
Last position:
Design of an AI-Agent-Based ERP System
- Design of an LLM-based agent system to control the ERP software
- Development of agent workflows with LangGraph and PydanticAI
- Planning interfaces between business logic and language models
- Planning agent orchestration
- Prototype development and demonstration
Tools: Python, Pydantic, React, LangChain, LangGraph, Linux
Jorge Pérez Suárez
Last position:
Software Engineer – AWS and Kubernetes Specialist at Citti
- Creation, maintenance and hardening of Kubernetes clusters employing Ansible and ArgoCD
- Keywords: Ansible, AWX, Kubernetes, NetApp, Prometheus, CI/CD ArgoCD, SSO, Fluent-bit, HAProxy, Calico, Keycloak, oauth2-proxy, SealedSecrets, kubeseal, Aqua kube-bench, CIS-Benchmarks, Aqua Trivy operator
Alexander Vitanyi
Last position:
Product Owner at FI-TS
- Rebuilding an existing cloud solution with Kubernetes, Terraform, Ansible, Prometheus, Grafana, GitLab, Argo CD and PostgreSQL
- Coordinating and managing external partners and service providers
- Ensuring service delivery on time and on budget with budget responsibility
- Integrating the cloud solution with external public clouds (AWS)
- Setting up and defining processes and workflows in Jira and Confluence
- Product management of software development for automation and self-service in CI/CD DevOps mode
- Agile software development with Kanban and Scrum in various development teams
- Single point of contact for key customers in respective projects
- Creating and aligning the product backlog with stakeholders from sales, architecture, development teams, marketing, management and customers
- Migrating existing customers to the AWS cloud as product owner
- Creating and aligning a product roadmap with internal and external stakeholders
Tino Truppel
Last position:
Director Technology at Forte Digital Germany
- Leading 20+ staff in development, site reliability engineering, and architecture.
- Leading the group-wide agentic AI initiative (Norway, Poland, Germany).
- Hands-on solution architect and AI consultant for over 50% of my working time on client projects in the publishing sector – from local publishers to international corporations.
- Strategic consulting and technical implementation of AI workflow platforms (n8n, Workato).
- Developing prototypes for traditional, AI-based, and agentic AI workflows.
Matthias Steinmann
Last position:
Senior Security Consultant (freelance) at DVZ M-V
- ISMS and security concept for the Fabasoft e-file according to BSI 200-1/2, among others
- Structural analysis (A.1), modeling (A.3), and baseline protection checks (A.4)
- Preparation for OWASP penetration test, incident response plan, risk analysis
- DevOps Bitbucket, ARC42, IAM with Keycloak/AD, multi-tenant setup, DMS, SOC
- Emergency preparedness concept (BSI 200-4), operations and service concept (BSK), ITSM
Discover over 15,000 top freelancers
Statistics of experts using Keycloak
Aggregated from the professional profiles of matched freelancers.
Experience
19 years (Germany: 18 years)
Position duration
2 years (Germany: 1.7 years)
Positions per freelancer
14 (Germany: 13)
Top business areas
Information Technology, Product Development, Project Management
Top industries
Information Technology, Automotive, Banking and Finance
Certification focus areas
Information Technology, Project Management, Product Development
Bachelor's degree or higher
81% (Germany: 87%)
Master's degree or higher
25% (Germany: 53%)
Certifications per freelancer
3 (Germany: 2)
Most common languages
German, English, French
Speak two or more languages
95% (Germany: 97%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Berlin are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Berlin using Keycloak
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Identity control
Keycloak is an open source identity and access management product. Companies use it for single sign-on, login flows, user federation, token handling, and secure access across web apps, APIs, and internal tools. It is common in systems that need centralized authentication without building it from scratch.
Core setup
- Realm and client configuration
- Role and group design
- SSO, logout, and session flow
- LDAP or directory integration
- OAuth 2.0, OpenID Connect, and SAML
Strong specialists know how these parts connect and how to keep them maintainable. They also understand how Keycloak behaves in production, not just in a demo.
Typical work
Freelance experts are often brought in for migrations from older login systems, new application onboarding, identity broker setup, or tuning access policies. They also help when teams need custom login pages, multi-tenant rules, or cleaner integration between services. In Berlin, this work often fits product teams that need secure delivery without slowing release cycles.
What good experts do
Good professionals translate business access rules into clear Keycloak configuration. They can work with token claims, client scopes, protocol mappers, and theme changes, while keeping security and maintainability in view. They also know when to use standard features instead of custom code.
Ecosystem skills
- Java and Spring-based service integration
- OAuth 2.0 and OpenID Connect flows
- SAML for enterprise identity
- Docker and Kubernetes deployment work
- Reverse proxies and API gateways
A strong profile combines identity knowledge with practical delivery skills. That is what makes the setup stable across development, test, and production.
When to bring help
Teams usually call in Keycloak specialists when login becomes a blocker, when security reviews raise access gaps, or when a migration needs careful planning. External support also helps when internal teams need a second set of eyes on realms, sessions, token content, or integration design. For Berlin companies, remote collaboration is common, but on-site workshops can help early in a complex rollout.
Frequently asked questions
Questions about Keycloak? Start with the answers below.
Keycloak is used to centralize login, single sign-on, token issuance, and access control for applications and APIs. Teams choose it when they want a standard identity layer instead of building authentication logic in each service. It also supports federation with existing user stores and enterprise identity systems.
Keycloak is usually chosen when a team wants control, self-hosting options, and deep configuration without paying for a fully managed identity service. Compared with Auth0 or Okta, it asks for more setup work but gives more ownership. Compared with custom login code, it is far more complete and easier to maintain.
A strong Keycloak specialist usually knows OAuth 2.0, OpenID Connect, and often SAML. Java, Spring, Docker, Kubernetes, and reverse proxy setup are also useful because identity work rarely lives in isolation. Clear understanding of security concepts matters as much as tooling.
A good Keycloak freelancer can start with limited context if the login flows, user sources, and target applications are clear. For migration or enterprise integration work, they need details about roles, claims, sessions, and existing identity systems. The more complex the access model, the more important discovery work becomes.
Yes, Keycloak work is often done remotely because most setup tasks happen in code, configuration, and testing environments. Berlin teams may still want an on-site workshop for stakeholder alignment, especially when identity touches many applications. The best setup is usually a mix of remote delivery and focused local sessions.
If Keycloak setup is blocking a release, if teams are unsure how to model roles and groups, or if a migration is becoming risky, outside help is sensible. Other signs are repeated token issues, confusing client settings, or login flows that differ across applications. A specialist can usually simplify the design quickly.
Look for real experience with Keycloak realms, clients, token mapping, federation, and production deployments. Good professionals explain trade-offs clearly, avoid unnecessary customizations, and can describe how they handled security and rollback. A solid profile shows delivery work, not just tool familiarity.
Keycloak covers many common identity and access needs, but larger environments may also need directory services, governance tools, or a wider IAM strategy. The right expert will tell you where Keycloak fits and where other systems should stay in place. That practical view is often more valuable than adding more features.
The average hourly rate of freelancers in Berlin, Germany who have used Keycloak in their recent projects is 91 €, which corresponds to a daily rate of about 731 € based on an 8-hour working day.
Of the freelancers in Berlin, Germany who have used Keycloak in their recent projects, 81% hold at least a Bachelor's degree and 25% hold at least a Master's degree.
On average, freelancers in Berlin, Germany who have used Keycloak in their recent projects have 19 years of professional experience, with a single engagement typically lasting around 2 years.
The most common languages among freelancers in Berlin, Germany who have used Keycloak in their recent projects are German (100%), English (95%), and French (36%).
The most common industries among freelancers in Berlin, Germany who have used Keycloak in their recent projects are Information Technology (100%), Automotive (55%), and Banking and Finance (50%).
The most common business areas among freelancers in Berlin, Germany who have used Keycloak in their recent projects are Information Technology (100%), Product Development (82%), and Project Management (64%).
Main locations of FRATCH Experts, who have recently used Keycloak
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Hamburg 
Munich 
Cologne 
Frankfurt 
Stuttgart 
Dusseldorf Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
