Carl Stuart

Cloud Devops Engineer Iv Java Developer @DXC Technology

Newcastle-upon-Tyne, GB

Developing a highly customised IdM platform that clients (and their applications) can seamlessly onboard to. Developed a lot of the initial automation to build out and configure multi-tier development environments in AWS using Terraform. Configuration for AWS components such as EC2 and EKS were all done using Ansible and Powershell. All of this is tied together via pipelines that allow developers to spin up and tear down development environments with ease. Core responsibilities, however, is the setup, configuration and development of Keycloak (and by extension, Red Hat SSO). As the solution is highly customised, it requires a significant number of custom plugins written in Java to support functionality that Keycloak does not natively support. This includes- Selectable Consent- Domain (Home Realm) Discovery- JWT Remote Claim Enrichment- Custom User Federation- RSA SecurID Token Integration (with support for User and System generated PINs as well as Next Tokencode validation)On top of this, I developed several other proof of concepts to showcase various Keycloak services. These include- A web portal showcasing all the authentication types for the Client Credentials Grant (Client ID and Secret, Signed JWT, X509 etc)- A web app showcasing how Token Exchange (RFC-8693) works within Keycloak- A web app that showcases how the Device Authorisation Grant (RFC-8628) type works- A stub server that simulates and replaces the need for a full RSA Authentication Manager deployment (for testing only, obviously). This saved considerable time and money of deployment, automation and, above all, cost, licensing and practicality- Currently developing a proof of concept to dynamically and periodically rotate realm signing and encryption keys via a HSM. CloudHSM is being used as the PoC with Thales in scope to replace it.

Northumbria University

Bachelor’s Degree