DevOps Engineer – SSO & Identity

Expleo is a global engineering, technology, and consulting service provider that partners with leading organizations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses.  

Expleo benefits from more than 50 years of experience developing complex products in automotive and aerospace, optimizing manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalization, automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. 

With a worldwide presence in 30 countries, our global footprint includes excellence centers around the world, including Romania since 1994.

We are looking for a DevOps Engineer to support and maintain a business-critical Single Sign-On (SSO) service for an international client environment. The role focuses on reliable authentication and identity federation, secure integration with downstream systems, infrastructure automation, and robust CI/CD practices.

Key responsibilities:

• Maintain and operate the SSO service, including authentication, authorization, token lifecycles, and session management.
• Monitor service reliability, performance, and security, and contribute to alerting and incident-response processes.
• Manage identity-provider integrations using SAML and OIDC, including metadata exchange and federation configurations.
• Collaborate with development and security teams to implement identity-related features and resolve technical issues.
• Ensure secure secret management, key rotation, and certificate handling.
• Maintain Infrastructure as Code (IaC) for SSO infrastructure and related components, enabling reproducible environments.
• Develop and maintain CI/CD pipelines for deployments, migrations, and rollbacks.
• Create and maintain architecture documentation, runbooks, and standard operating procedures.
• Participate in the on-call rotation and post-incident reviews, contributing to continuous improvement.

• 5+ years of experience in Platform Engineering, DevOps, or SRE roles, ideally with SSO or identity-related responsibilities.
• Strong Linux proficiency and experience operating services in Linux-based environments.
• Strong hands-on experience with Terraform and infrastructure automation.
• Experience with GitLab CI/CD or comparable CI/CD tooling, including automation of builds, tests, and deployments.
• Good understanding of IAM concepts and protocols such as SAML, OIDC, OAuth, and federation mechanisms.
• Experience with at least one major cloud platform such as AWS, Azure, or GCP.
• Experience with secure secret-management practices.
• Scripting skills in Bash, Python, or similar languages for automation and tooling.
• Strong problem-solving, communication, and collaboration skills.

• Experience with LDAP / Active Directory, SCIM, or enterprise identity providers.
• Knowledge of security hardening, auditing, and compliance practices.
• Experience with VM orchestration and related tooling.

• Hybrid, a few days per month at the office.
• CIM only

• Benefit Platform 
• Holiday Voucher 
• Private medical insurance  
• Performance bonus 
• Easter and Christmas bonus 
• Employee referral bonus 
• Bookster subscription  
• Work from home options depending on project