diff --git a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml
index 9f544db6..b820eab4 100644
--- a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml
+++ b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml
@@ -9,7 +9,7 @@ metadata:
   name: keycloak-portal-admin-secret-ensure-5
   namespace: sso
 spec:
-  suspend: false
+  suspend: true
   backoffLimit: 0
   template:
     metadata: