Senior PAM Solution Specialist

Your IT Future, Delivered

Senior PAM Solution Specialist

With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experience.

#DHL #DHLITServices #GreatPlace

What you will do

• Engineer, configure and continuously improve enterprise PAM solutions.
• Design and implement onboarding of privileged accounts, administrative identities, service accounts and target platforms.
• Develop and maintain access policies, credential rotation and privileged session management capabilities.
• Integrate PAM with Windows, Linux, Active Directory, databases, applications and infrastructure platforms.
• Troubleshoot complex authentication, connectivity, platform and integration issues.
• Improve reliability, scalability, security and operational efficiency of the PAM service.
• Identify repetitive operational activities and automate them using scripting and APIs.
• Participate in upgrades, migrations, lifecycle management and technical projects.
• Work directly with infrastructure, application and security teams to understand their requirements and develop practical solutions.
• Contribute to technical documentation, standards and engineering practices.
• Proactively identify weaknesses or improvement opportunities and drive them rather than waiting for somebody else to take ownership.

.

Ready to embark on the journey? Here’s what we are looking for:

Technical background:

• Enterprise Privileged Access Management, ideally CyberArk or comparable platforms.
• Windows Server and Linux administration.
• Active Directory, LDAP and enterprise authentication concepts.
• Privileged accounts, service accounts and credential lifecycle management.
• Networking fundamentals, including DNS, TCP/IP, firewalls, proxies and TLS.
• PowerShell, Python or another scripting language.
• REST APIs and system integrations.
• Cloud platforms such as Azure, AWS or GCP.
• Security principles including least privilege, separation of duties and Zero Trust.
• Monitoring, logging and troubleshooting in enterprise environments.

Direct CyberArk experience is an advantage, but it is not mandatory if you bring strong infrastructure/security engineering fundamentals and are motivated to learn.

The mindset we are looking for:

You:

• Take ownership. When you discover a problem, your first reaction is to understand how it can be solved.
• Are self-driven. You do not need a manager to break your work into individual tasks.
• Are comfortable with change. New technology, new requirements and changing priorities do not intimidate you.
• Question the status quo constructively. "We have always done it this way" is not sufficient justification for you.
• Look for improvement. You naturally notice manual processes, technical debt and inefficient ways of working.
• Learn independently. You are comfortable entering an unfamiliar technical area and building the required knowledge.
• Collaborate. You challenge ideas without creating unnecessary conflict.
• Finish what you start. You take responsibility not only for designing solutions but for making them work in reality.

An array of benefits for you:

• Hybrid work arrangements to balance in-office collaboration and home flexibility.
• Outpatient (unlimited) and inpatient medical coverage for employees.
• Personalized flexi benefit plan for you and your family.
• Choose any day off from earned public holidays, including Saturdays and ad-hoc holidays to spend with your loved ones.
• Modern offices with free parking space.

DHL is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other protected characteristic.