Keycloak Expert Wanted for Multi-Tenant IAM in AI SaaS Tool (Vue + Electron) -- 2
Budget: €250 – €750 EUR
We’re building DAVI, a multi-tenant AI SaaS platform for childcare organizations. The application uses Haystack and a RAG (Retrieval-Augmented Generation) pipeline to provide document chat, GGD-rule validation, and intelligent support features. We're looking for a Keycloak expert to set up secure and scalable multi-tenant Identity and Access Management (IAM) from scratch.
________________________________________
Requirements:
• Fully isolated user accounts per tenant (strict tenant separation)
• Role-based access control (RBAC) per tenant
• Custom roles per tenant (e.g. medewerker, beheerder, GGD)
• Integration with internal applications (Vue, Electron) via Keycloak Admin API
• Use of JWT tokens for protected access to AI endpoints (Python + Haystack)
• Automated tenant onboarding: when a new tenant registers, a Keycloak realm or configuration must be provisioned automatically
• Experience with Vue and Electron is required
________________________________________
Extra
• Ability to pass Keycloak token data (tenant, role) to Haystack middleware for document-level access filtering
• Experience with token mappers, client scopes, and dynamic realm creation
• Knowledge of OAuth2 / OIDC, user federation, and realm configuration
• Experience with FastAPI or working in RAG-based AI architectures
________________________________________
Ideal Skills:
• Deep Keycloak knowledge (multi-tenant setups, custom realms, scopes, mappers)
• IAM and security expertise (RBAC, token validation, best practices)
• Proven experience integrating Keycloak with Vue and Electron apps
• Comfortable building full Keycloak setups from scratch
• Familiarity with AI backends using Haystack and RAG pipelines
________________________________________
Projects and experience with:
• Multi-tenant IAM
• Automated provisioning
• Vue + Electron integration
• Keycloak setup from scratch
• AI SaaS applications using RAG
• Keycloak
OAuth 2.0
OpenID Connect
REST API
RBAC (Role-Based Access Control)
JWT
________________________________________
Requirements:
• Fully isolated user accounts per tenant (strict tenant separation)
• Role-based access control (RBAC) per tenant
• Custom roles per tenant (e.g. medewerker, beheerder, GGD)
• Integration with internal applications (Vue, Electron) via Keycloak Admin API
• Use of JWT tokens for protected access to AI endpoints (Python + Haystack)
• Automated tenant onboarding: when a new tenant registers, a Keycloak realm or configuration must be provisioned automatically
• Experience with Vue and Electron is required
________________________________________
Extra
• Ability to pass Keycloak token data (tenant, role) to Haystack middleware for document-level access filtering
• Experience with token mappers, client scopes, and dynamic realm creation
• Knowledge of OAuth2 / OIDC, user federation, and realm configuration
• Experience with FastAPI or working in RAG-based AI architectures
________________________________________
Ideal Skills:
• Deep Keycloak knowledge (multi-tenant setups, custom realms, scopes, mappers)
• IAM and security expertise (RBAC, token validation, best practices)
• Proven experience integrating Keycloak with Vue and Electron apps
• Comfortable building full Keycloak setups from scratch
• Familiarity with AI backends using Haystack and RAG pipelines
________________________________________
Projects and experience with:
• Multi-tenant IAM
• Automated provisioning
• Vue + Electron integration
• Keycloak setup from scratch
• AI SaaS applications using RAG
• Keycloak
OAuth 2.0
OpenID Connect
REST API
RBAC (Role-Based Access Control)
JWT