Build an IT platform : Internal IAM, SSO and Device Management Platform

We are looking for an experienced full-stack developer or small technical team to build an internal IT management platform. This platform will be used by our IT team to manage users, SSO, MFA status, macOS/Windows devices, compliance reports, and onboarding/offboarding workflows from a centralized dashboard. ## Core Requirements ### 1. User Management * Create, update, suspend, and manage users * Group and department mapping * Employee metadata such as name, email, employee ID, department, manager, location, and status * User audit logs ### 2. SSO / IAM * SAML 2.0 and OIDC/OAuth2 support * App catalog * Group-based app access * Login audit logs * MFA visibility and enforcement where possible ### 3. Device Management * macOS and Windows device inventory * User-to-device assignment * Hostname, serial number, OS version, encryption status, firewall status, installed apps, local admin visibility, and compliance status * Secure escrow of FileVault and BitLocker recovery keys using encryption, strict RBAC, audit logging, and access controls * Future support for osquery/FleetDM/custom agent/Apple MDM/PowerShell-based reporting ### 4. Compliance Reports * User onboarding report * User offboarding report * Active/suspended users report * Device compliance report * Encryption report * OS update report * Installed software report * Admin activity report * CSV/Excel export ### 5. Admin Dashboard * Total users * Active/suspended users * Total devices * Non-compliant devices * Devices pending OS update * Users without MFA * Recent admin actions * Alerts and exceptions ## Preferred Tech Stack * React.js / TypeScript / Tailwind CSS * Node.js / Express or NestJS * PostgreSQL or SQLite for local MVP * Docker Compose * Keycloak/Auth integration * Linux deployment experience ## Important This project involves identity, access, devices, encryption recovery keys, and compliance. We need secure architecture, clean code, proper documentation, audit logs, RBAC, and deployment guidance. ## Local MVP Scope We want to start with a local MVP first: * Admin login * User management * Group management * App catalog * Device inventory table * CSV import/export * Compliance dashboard * Audit logs * Onboarding/offboarding workflows * Docker Compose setup ## Proposal Requirements Please include in your proposal: 1. Relevant IAM/SSO/MDM/device management experience 2. Recommended architecture 3. Whether you would use Keycloak, Authentik, Zitadel, or another approach 4. MVP timeline 5. Estimated cost 6. Risks or limitations 7. Similar projects you have built